反入侵安全工程师（J105784）
Core
Build and operate intrusion detection and prevention strategies for corporate networks, including endpoint, email, and traffic security.
Role type
Security Engineer (Intrusion Detection & Prevention)
Builds
Intrusion detection and prevention systems, detection strategies, and security tools
Domain
Cybersecurity / Network Security
Deliverable
production ML models | product features
Required skills
MITRE ATT&CK framework knowledge, Python or Golang programming, security tool development, alert analysis, incident response coordination
Preferred skills
Offensive security experience, red/blue teaming participation
Technologies
MITRE ATT&CK, Python, Golang
Responsibilities
Develop attack detection and prevention policies for endpoint, email, and traffic security; Analyze intrusion alerts and coordinate with incident response teams; Enhance detection and response capabilities through industry analysis and攻防演练 (attack/defense drills); Ensure coverage, effectiveness, and stability of intrusion detection systems.
