Security Operation Engineer (Intern)

About The Team

The Information Security team is at the core of the Tiger Brokers trading platform. Comprising passionate engineers from across the globe, the team endeavors to develop the best systems using the most appropriate technologies. The SOC operations function is accountable for planning and overseeing the monitoring and maintenance of security operations, and providing guidance and leadership to internal resources.

If you share the passion for cybersecurity, there's no better way to experience it firsthand.

Job Description

- Monitor and analyze security infrastructure to support detection and response to threats, vulnerabilities, and incidents.

- Conduct basic investigations of security events, including malware infections and unauthorized access attempts.

- Escalate critical cases to the incident response team and to provide support where needed

- Assist in identifying opportunities for tuning to improve detection accuracy and reduce false positives

- Handling case management, generating tickets and reports when required, and tracking open tickets until closure

- Prepare scheduled and ad-hoc reports

Preferred Qualifications, Capabilities, And Skills

- Currently pursuing a Bachelor's degree in Computer Science, Information Technology, Software Engineering or related fields

- Fluent in Mandarin (reading, writing, and speaking), to communicate with China R&D teams.

- Internship period, 3 months or longer.

- Experience in cybersecurity operations, encompassing vulnerability management, threat detection, and incident response.

- Familiar with OWASP TOP 10 vulnerabilities, and possess a deep understanding of the principles, exploitation, patching, and reinforcement of various vulnerabilities.

- Familiar with networking protocols, encryption, firewalls, operating systems (Linux, Windows), and security tools such as antivirus software, SIEM, and IDS/IPS.

Preferred Qualifications

- Having been awarded prizes in CTF challenges.

- Certifications in the cybersecurity domain, such as CompTIA Security+, Certified Ethical Hacker (CEH), and Offensive Security Certified Professional (OSCP), etc.