Data Security

• Develop and enhance enterprise data security detection capabilities, including but not limited to DLP, sensitive data identification, data encryption/decryption, and data masking.
• Continuously validate and optimize existing data security rules, models, and detection strategies to improve coverage and accuracy.
• Participate in data security incident identification, response, investigation, and forensics.
• Build and maintain data asset maps; use graph-based techniques to trace data flows and identify risks of sensitive data exfiltration.
• Use enterprise data platforms to perform risk analytics, anomaly detection, and data-focused threat modeling.

Endpoint / Host Security

• Build and improve host-based detection capabilities, including malware analysis, intrusion detection, threat modeling, and host behavior baseline modeling across office and production environments. 
• Continuously refine host security policies and detection models to improve detection performance and reduce false positives.
• Handle host security alerts and incident response end-to-end.
• Enhance endpoint data collection pipelines to improve data completeness, integrity, and real-time coverage.
• Detect and analyze APT attacks and attempted intrusions across multi-cloud and hybrid environments; support endpoint security architecture improvements.

What We Look For In You