2027 Fresh Grad Hire - Security Operations Engineer

Job Responsibilities

Participate in the development of the company's security operations and protection system; under the guidance of a mentor, take part in day-to-day operations across areas such as vulnerability analysis, threat intelligence, and security incident detection and response.

Assist in the monitoring, analysis, and initial handling of security incidents; support issue localization, remediation follow-up, and post-mortem report writing; continuously learn and optimize protection strategies.

Assist in maintaining the day-to-day security operations processes for cloud infrastructure, including WAF configuration, DDoS protection, host monitoring, vulnerability scanning, image and container security management, and security baseline checks; learn to identify and assess security risks of cloud assets.

Qualifications

Strong interest in cybersecurity; understanding of common network attack and defense principles; familiarity with the OWASP Top 10 and common vulnerability principles (e.g., SQL injection, XSS, CSRF) is preferred.

Familiarity with mainstream security products and their underlying principles; experience in any of the following is preferred (mastery not required):

Exposure to security devices or platforms such as WAF, firewalls, intrusion detection, vulnerability scanning, or host protection;

Understanding of the basic security services of mainstream cloud platforms such as AWS, Alibaba Cloud, or Tencent Cloud;

Participation in CTF competitions or campus security clubs, or ownership of a personal security blog or GitHub security projects, is preferred.

Understanding of the basic methods for security incident tracing and log analysis; familiarity with common attack chain models (e.g., MITRE ATT&CK); ability to use basic tools (e.g., grep, ELK, SQL queries) for log querying and correlation analysis is preferred.

Preferred Qualifications

Internship experience in security operations, penetration testing, or vulnerability analysis.

Self-taught proficiency in security tools (e.g., Nmap, Burp Suite, Wireshark) with the ability to perform basic operations.

Open to candidates graduating between January 2026 and August 2027.