Security Engineer
Engineering | Beijing, China
The Role
We are looking for an Infrastructure Security Engineer responsible for monitoring, implementing and hardening the security of our infrastructure and web applications. As a Security Engineer in the company you need to monitor security, assess and improve current security practices and compliance, as well as actively assist in the implementation of our information security program. You will report directly to our Security Director. Creative mindset and hands-on system experience will be required for this position. This is a great opportunity to join us and apply your skills to secure our fast-growing awesome big data platform.
Your responsibilities will include:
•Perform, or review, technical security assessments of our information systems computing environments to identify points of vulnerability and non-compliance with established Information Security Policies and Standards.
•Provide detailed technical recommendations or assist in the implementation of the system, network and application security requirements.
•Assist the OPS team in the identification and implementation of appropriate information security functionality to ensure uniform application of the security policy and standards.
•Improve company security policies, technical standards and procedures to follow the best security practices in line with our business requirements.
•Contribute to the security planning, assessment, risk management and awareness activities for system and networking operations.
•Perform platform security monitoring, propose and implement control improvements.
•Working very closely with the Engineering team ensuring new products and features meet Security requirements.
•Monitor security vulnerabilities and threats on the environment.
You
You should have a good experience in the information security or production systems operation field and be ready to take the responsibility of managing this important part of App Annie.
•3+ years experience in an information security or systems operation position.
•Strong skills with Linux systems (ubuntu, debian) administration and security hardening, including nginx/apache/haproxy.
•Deep understanding of TCP/IP and network security including proxy and VPN configuration details.
•Good skills in scripting using Shell/Python/Perl.
•Has security expertise in one or more of the following: system security hardening; network security; risk management; intrusion detection (IDS/IPS); web application firewall (WAF); firewalls; security audit & testing; penetration testing; vulnerability scanning; incident handling; cryptography best practices; configuration & change management.
•Knowledge and experience in one or more of the following areas is a plus:
◦Secure application development practices
◦Configuration management tools (salt,chef,puppet)
◦AWS Cloud services (EC2, SQS, S3, ...)
◦RDBMS, NoSQL or BigData database security
◦Windows Server administration and security
•Knowledge and experience with ISO 27002, PCI-DSS or other information security standards recommended.
•Security certifications appreciated (CISSP, ...).
•Hands-on experience ensuring the security of a production infrastructure.
•Must have good judgment, problem-solving and decision-making skills.
•Pragmatic, rigorous, strong will to learn and improve in a fast-paced environment.
•Good English written and verbal communication skills required.
DevOps Engineer
Engineering | Beijing, China
Send Jobvite
We are looking for System Operation Engineers responsible for operating and managing our hybrid (private and cloud) based web services and web applications. As the system operation engineer in the company you need to ensure our service running stable, high available and cost effective. You are responsible for monitoring and fixing production problems with the art to ensure minimal impact on our business. If you are lazy to repeat yourself and lover for devops principle and system automation, this is great opportunity to join us to build up awesome big data platform.
Responsibilities:
•Building and maintaining a world-class systems infrastructure delivering high reliability and the best performance possible.
•Ensuring cost-effective service delivery by automating critical processes, including server deployment, configuration, monitoring, and problem resolution.
•Ensuring systems are secure and compliant with industry best practices.
•Performing quick and accurate troubleshooting, diagnostic to production system.
•Managing and tuning RDBMS and NoSQL DB servers including postgresql, mongodb and hbase.
•Assisting with capacity planning and scalability to ensure systems are optimized for continuous growth.
•Designing and implementing system automation architecture, infrastructure, and process using tools such as Salt, Puppet or Chef.
•Working very closely with Engineering team ensuring new products and features meet Operational requirements.
•Establishing a metrics-driven approach to tracking and continuously improving service quality and risk mitigation in every sense.
•Providing occasional off-shift availability for Production issues or maintenance.
You:
You should have a good experience in the system operation related field and be ready to take the responsibility of managing this important part of App Annie.
•3+ years experience in network and system engineering position.
•Strong skills with Linux system (ubuntu, debian) administration including nginx/apache/haproxy.
•Good DB operation experience on PSQL scripting, Postgres replication or Load Balancing is big plus.
•Good Experience in large scale Hadoop cluster (HDFS, Mapreduce) operation/tuning/monitoring is a big plus.
•Hands on experience in configuration management tool like (salt,chef,puppet).
•Hands on experience on nagios,munin and other open source monitoring solutions.
•Hands on experience in AWS cloud service (EC2, SQS, S3).
•Strong RDBMS operation experiences (PostgreSQL, Mysql). Scale-out solution like database partition/read scale is plus.
•Strong understanding on TCP/IP and network administration including proxy and VPN.
•Good skills in scripting using Shell/Python/Ruby.
•Hands on experience testing and deploying large scale server software.
•Strong problem solving, analytical and troubleshooting skills.
•Experience in NoSQL DB operation like (Mongodb, Hbase) is a big plus.
•Experience in windows administration is plus.
•Good level of English written and spoken.
