About this role
- Participate in the development of the company's security operations and protection system; under the guidance of a mentor, take part in day-to-day operations across areas such as vulnerability analysis, threat intelligence, and security incident detection and response.
- Assist in the monitoring, analysis, and initial handling of security incidents; support issue localization, remediation follow-up, and post-mortem report writing; continuously learn and optimize protection strategies.
- Assist in maintaining the day-to-day security operations processes for cloud infrastructure, including WAF configuration, DDoS protection, host monitoring, vulnerability scanning, image and container security management, and security baseline checks; learn to identify and assess security risks of cloud assets.
Requirements
-
Strong interest in cybersecurity; understanding of common network attack and defense principles; familiarity with the OWASP Top 10 and common vulnerability principles (e.g., SQL injection, XSS, CSRF) is preferred.
-
Familiarity with mainstream security products and their underlying principles; Experience in any of the following is preferred (mastery not required):
-
Exposure to security devices or platforms such as WAF, firewalls, intrusion detection, vulnerability scanning, or host protection;
-
Understanding of the basic security services of mainstream cloud platforms such as AWS, Alibaba Cloud, or Tencent Cloud;
-
Participation in CTF competitions or campus security clubs, or ownership of a personal security blog or GitHub security projects, is preferred.
-
Understanding of the basic methods for security incident tracing and log analysis; familiarity with common attack chain models (e.g., MITRE ATT&CK); ability to use basic tools (e.g., grep, ELK, SQL queries) for log querying and correlation analysis is preferred.
-
English & Chinese as working languages: fluent reading and writing; able to read English regulations and standards documents, and to conduct day-to-day email and meeting communication in English.
-
Preferred Qualifications
-
Internship experience in security operations, penetration testing, or vulnerability analysis.
-
Self-taught proficiency in security tools (e.g., Nmap, Burp Suite, Wireshark) with the ability to perform basic operations.
-
*Open to candidates graduating between January 2026 and August 2027.