Design the company-wide data security scheme under the new financial system, and be responsible for the implementation.
Develop and enhance data security detection capabilities, including but not limited to DLP, data encryption and data masking.
Continuously validate existing data security rules and models; follow up on data security incident identification, response, handling, investigation, and forensics.
Continuously improve risk identification capabilities in data security by optimizing detection rules and models to optimize the overall detection coverage; build data asset maps; use graph detection and other techniques to trace data flows and identify sensitive data exfiltration risks.
Explore and apply AI / LLM techniques to enhance security detection and response, and build AI-driven detection, triage, and automated response solutions.
Major in information security, network security, or computer science; 810 years of relevant experience in data security.
Hands-on experience with endpoint and email data loss prevention (DLP).
Familiar with the data security lifecycle, understanding the risk points and key objectives at each stage.
Familiar with common security offense and defense techniques, with experience in building security operations and managing data security risks; strong sensitivity to data exposure risks.
Familiar with data security products and detection methods such as DLP, UEBA, sensitive data identification, data encryption/decryption, and secure data sharing.
Experience with enterprise-level endpoint data protection solutions; experience in endpoint security, familiarity with macOS and Linux systems, and hands-on experience in data threat modeling is a plus.
Experience with enterprise-level big data analysis tools such as Flink, Hive, Spark, ElasticSearch, and graph technologies; hands-on experience in security data mining, analytics, or threat intelligence analysis is a plus.
Strong logical thinking and communication skills, with a good understanding of compliance and legal considerations.
Data security expert, directly responsible for DLP capacity building and implementation in financial institutions.
Experience designing endpoint data protection agent solutions.
Experience detecting or analyzing internal and external data leakage.
Experience in data lineage analysis, graph-based security analytics, or sensitive data flow tracing.
Hands-on experience with security data models, detection rule engines, or in-house security product development.
Prior experience building or operating data security systems within an enterprise security team.
Hands-on experience applying AI to security detection, alert triage, or automated response.
