Safe operation 安全运营（夜班23:00-09:00）

About usBitget is the world's largest Universal Exchange (UEX), serving over 125 million users and offering access to over 2M crypto tokens, 100+ tokenized stocks, ETFs, commodities, FX, and precious metals such as gold. The ecosystem is committed to helping users trade smarter with its AI agent, which co-pilots trade execution.Bitget is driving crypto adoption through strategic partnerships with LALIGA and MotoGP™. Aligned with its global impact strategy, Bitget has joined hands with UNICEF to support blockchain education for 1.1 million people by 2027. Bitget currently leads in the tokenized TradFi market, providing the industry's lowest fees and highest liquidity across 150 regions worldwide.What you'll doAlarm Daily Monitoring and Response: Responsible for the daily monitoring, alarm analysis and emergency response, as well as traceability of security alarms on the SOC platform (SIEM/SOAR/XDR).Alarm Baseline and Rule Construction: Responsible for extracting features from logs of various security devices (such as WAF, IDS, EDR, honeypots, etc.) and formulating alarm baseline strategies. Continuously optimize correlation analysis rules to reduce invalid alarms at the source.Data Risk and Underreporting Detection: Utilize AI to conduct behavioral analysis on massive security logs. Through threat hunting (Threat Hunting), actively discover advanced persistent threats (APT) and potential underreportings.Automated Playbook Assembly (SOAR): Standardized alarm handling procedures, writing SOAR automated playbooks (Playbook), promoting the automation of alarm analysis and closed-loop handling, and improving overall operational efficiency.Review Analysis and Security Enhancement: Regularly review major or typical alarm events for review, producing security operation reports. Analyze the root causes and propose reinforcement suggestions to the collaborative team to achieve a closed-loop in security defense.What you'll needWork Experience and Education: Have at least 5 years of experience in well-known SOC and large enterprise security operation centers.Log Analysis and Equipment Operation: Proficient in Linux/MAC system logs, network traffic, and logs of mainstream security devices (firewalls, EDR, WAF, traffic analysis, etc.). Able to proficiently write SQL/SPL (Splunk) and other query statements.Programming and Automation Skills: At least proficient in one programming language such as Python/Go. Capable of using scripts for massive data processing, API integration, and development of security tools.Threat Insights and Offensive-Defensive Confrontation: Familiar with the ATT&CK framework, proficient in common web attacks (OWASP Top 10), and understanding of system vulnerability exploitation and persistence techniques. Can examine log data from the attacker's perspective and identify bypass behaviors.Additional Benefits (Preferred):Have experience in building an SOC operation system or SOAR orchestration from scratch in large enterprises.Practical implementation experience in the security intelligent agent (AI Agent) scenario.Have experience in identifying high-risk vulnerabilities and conducting red-blue exercises.岗位职责：告警日常值班与响应：负责SOC平台（SIEM/SOAR/XDR）安全告警的日常监控、告警研判与应急响应和溯源。告警基线与规则建设：负责各类安全设备（如WAF、IDS、EDR、蜜罐等）日志的特征提取与告警基线策略制定。持续优化关联分析规则，从源头减少无效告警。数据风险与漏报挖掘：运用AI对海量安全日志进行行为分析。通过威胁狩猎（Threat Hunting）主动发现高级持续性威胁（APT）及潜在漏报。自动化剧本编排（SOAR）：标准化的告警处置流程，编写SOAR自动化剧本（Playbook），推动告警研判与闭环处置的自动化，提升整体运营效率。复盘分析与安全加固：定期对重大或典型告警事件进行复盘，产出安全运营报告。分析根因并向协同团队提出加固建议，实现安全防御的闭环。任职要求：工作经验与学历：具有 5年以上 知名SOC、大型企业安全运营中心工作经验。日志分析与设备实操：精通Linux/MAC系统日志、网络流量及主流安全设备日志（防火墙、EDR、WAF、流量分析等）。能够熟练编写 SQL/SPL（Splunk） 等查询语句。编程与自动化能力：至少精通 Python/Go等一门编程语言。具备利用脚本进行海量数据处理、API对接及安全工具开发的能力。威胁见解与攻防对抗：熟悉 ATT&CK 框架、精通常见Web攻击（OWASP Top 10）、了解系统漏洞利用及持久化技术。能从攻击者视角审视日志数据，识别绕过行为。加分项（优先考虑）：在大型企业中有过从零到一构建SOC运营体系或SOAR编排经验。安全智能体（AI Agent）场景的实际落地经验。有高危漏洞挖掘，红蓝实战经验Why Bitget?Bitget is the world's leading web 3 platform for copy trading and one of the world's largest and most respected exchangesWe are a global company with staff members from over 50 different countries and regionsWe are growing and looking for world-class ambitious talents to help us continue this journeyWe have a streamlined structure that empowers employees to work efficiently, delivering the best results in a short timeframeWe offer competitive salaries and benefitsBlockchain technology and digital assets have the potential to change finance in a way no other technology can - be part of it!If you are ambitious and believe that digital assets could be the next financial and technological revolution, please apply!For more information regarding candidates' personal data processing, please refer to Bitget Candidate Privacy Notice.