Alibaba Cloud Intelligence-Cloud Security Services Operation Manager-Hong Kong SAR

Alibaba Cloud Intelligence – Cloud Security Services Operation Manager (Hong Kong SAR) Job posted 1 day ago. Be among the first 25 applicants. Get AI‑powered advice on this job and more exclusive features. Direct message the job poster from Alibaba Cloud. Job Description 1. Delivery and Quality Management of Alibaba Cloud Security Services (including on‑site/inspection) Enhance the security posture of Apsara Stack projects through continuous security services (on‑site support, inspections, risk assessments, etc.). Establish security product services and operational assurance systems, building a comprehensive and reliable technical monitoring framework to ensure stability and security of online business systems. Develop onsite security operation processes, design and optimise daily service/operation workflows, and manage the quality of security service delivery. 2. Management, Delivery, and Technical Support for Alibaba Cloud Major Event Safeguarding Projects. Conduct security risk assessments for Alibaba Cloud during safeguarding period, propose reinforcement and remediation suggestions, and drive the implementation of security enhancements. Provide critical escort support services for customers during key periods, including duty shifts during safeguarding period, attack‑defence drills, security incident handling, emergency response, forensic investigations, etc. 3. Development of Alibaba Cloud Security Technical Strategies, including security inspection baselines and solutions for network, system, middleware, cloud products and applications, etc. Implement tailored security capabilities aligned with customer business scenarios (e.g., policy tuning, feature activation, configuration optimisation of security products). Design security inspection baselines, deploy via productive tools, analyse detection results, and formulate remediation plans. Conduct technical validation to verify the effectiveness of security baseline risk remediation efforts. 4. Research and Establish Emergency Response Process Standards & Automated Tool Capabilities based on the development trends of Alibaba Cloud. Track the latest security attack/defence techniques, threat landscapes, vulnerabilities, and tooling; operationalise capabilities in real‑world scenarios. Research cloud‑based implementations of the Identify‑Protect‑Detect‑Respond‑Recover (IPDRR) framework, formalising operational standards and automated toolchains. Job Requirements 5+ years of work experience in cyber‑security or related fields. Security Vendor Background: Experience at security service providers involving security services (penetration testing, security assessments, compliance consulting, security implementation, etc.) with relevant project exposure, including 3+ years of specialised expertise in one vertical security domain. Enterprise/Cloud Provider Background: Experience at large domestic/international internet firms, cloud providers, or client‑side enterprises, primarily responsible for security operations (security assurance, holistic compliance, etc.), with deep expertise in one technical domain, plus experience in cross‑team projects or leading small teams. Proven Deliverables: Possess relevant security operation project experience or demonstrable deliverables in specialised technical domains (e.g., security compliance, security operations, offensive/defensive security), including but not limited to vulnerability discovery, security operation solutions, operational frameworks, compliance consulting projects, etc. Tool & Product Mastery: Proficient with self‑developed and industry‑standard security operation tools, cloud and industry security products and their features; familiar with differences in security capabilities of competing products; able to leverage strengths/avoid weaknesses from an overall defence perspective while feeding insights into tool/product optimisation. Architecture Design: Capable of leading architectural design and implementation of security operation tools/systems, balancing technical ROI and functional enhancements. Project Delivery: Capable of independently delivering cross‑regional/cross‑industry operation projects; able to document best practices, pilot new technologies, and establish security management processes in key enterprise client engagements; serve as domain owner for assigned regions/fields. Collaboration Excellence: Strong teamwork and communication skills; understands team positioning within the broader organisational structure; maintain good collaboration with business/stakeholder teams; resolve role/cognition conflicts proactively and drive reasonable solutions. #J-18808-Ljbffr