The Alibaba International Cloud Product Security Team is entrusted with the core mission of safeguarding the secure operation of the cloud platform and protecting the business and data security of our customers. We are committed to building a trusted cloud security environment for customers worldwide, enabling their businesses to operate securely and grow sustainably on Alibaba Cloud.
Responsibilities
- Responsible for Alibaba Cloud's data compliance operations, including cross-border data transfer and privacy data compliance; handle third-party data compliance certifications and audits, and provide data compliance consulting to customers.
- Responsible for data security policy management, risk operations, early-warning operations, emergency response, and incident handling across Alibaba Cloud's production and office environments.
- Be sensitive to risk: conduct risk analysis and assessment around scenarios such as accounts, transactions, and marketing campaigns; use data analytics to map out clue relationships and pinpoint business pain points; and build a risk governance strategy system for on-cloud business security.
- Leverage techniques such as feature engineering, machine learning, and natural language processing to produce risk-control strategies, models, and intelligent agents, and continuously optimize their effectiveness; distill methodologies, refine product requirements, and work with product and engineering teams to drive the implementation and upgrade of an intelligent risk-control system.Qualifications
- Bachelor's degree or above, majoring in Computer Science, Information Security, or a related field, with 3+ years of experience in cloud computing or distributed systems operations / SRE.
- Solid TCP/IP troubleshooting skills, with the ability to independently scope online issues such as network unreachability, timeouts, and authentication failures.
- Familiar with the operations and troubleshooting of common middleware such as MySQL, Redis, and Kafka; proficient in writing operations scripts in at least one of Python, Go, or Shell, and able to locate problems through logs and SQL.
- Understand principles such as least privilege, key and certificate management, and security baseline hardening; possess a high degree of security awareness and confidentiality mindset.
- Strong service orientation and communication skills, adept at leveraging intelligent (intelligent systems) tools to improve efficiency, and able to adapt to on-call rotations and cross-time-zone collaboration.
Preferred Qualifications: Alibaba Cloud ACP / ACE certification; hands-on experience implementing SDL or vulnerability management processes.
The pay range for this position at commencement of employment is expected to be between $104,400 and $171,000/year. However, base pay offered may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience.
If hired, employee will be in an "at-will position" and the Company reserves the right to modify base salary (as well as any other discretionary payment or compensation program) at any time, including for reasons related to individual performance, Company or individual department/team performance, and market factors.