Overview
TSS Manager, Infrastructure Security Jobs in Shanghai, Shanghai, China at 佛吉亚（上海）汽车部件系统有限公司
Title: TSS Manager, Infrastructure Security
Company: 佛吉亚（上海）汽车部件系统有限公司
Location: Shanghai, Shanghai, China
该职位来源于猎聘 How You Contribute
- Responsible for design, implement and operate multi-cloud security, covering cloud security design, critical baseline, DevSecOps, security tooling and automation.
- Cloud security architecture and governance: Collaborating with cyber and data security team, design and implement cloud security tooling and solution to mitigate/improve infrastructure and application security on cloud.
- Baseline management: Build and maintain OS and Cloud K8S baseline following security baseline and providing regular baseline check and remediation.
- S-SDLC/DevSecOps: Following group tooling and solution, integrating with local application security ecosystem, take lead of DevSecOps culture and technology practice. Responsible for SAST, DAST, SCA, etc. security tooling integrating with current engineering flow.
- Vulnerability Management: Ensure infrastructure-level vulnerability can be monitored and remediated following cyber security vulnerability management policy.
- Incident Response and Collaboration: As a key team member of security incident management team, as an infrastructure security tech leader, providing effective technology support to support business. Role Qualifications:
- Bachelor’s degree, or higher in IT field.
- At least 10 years’ experience in infrastructure security operation and management, with at least ＞ 5 year of hands-on DevSecOps governance.
- Proficiency in DevOps (Gitlab, Jenkins and JFrog) and DevSecOps (SAST, DAST, SCA) toolchain.
- Proficiency in Docker and Kubernetes security configuration and hardening.
- Proficiency in security hardening based on Cloud Native technology and architecture.
- Be familiar with public cloud landing zone.
- Be familiar with NIST, CIS, MLPS and ISO27001, etc. security compliance and regulation.
- Have an excellence cross-function collaboration capability. Be able to make a perfect balance between technology team, business team, application team and cyber team.
- Able to think systemically and anticipate risk while striking a precise balance between agility, stability and security.
- Good problem-solving skill and emergency response leadership in high-stress situation.
- Good execution-oriented skill, be able to translate process into actionable checklist and task.
- Willing to continuous learning security automation technologies.
- Having any or some below certification CISSP, CCSP, Certified Kubernetes Security Specialist, Cloud security related certificate is a plus.
