Information Security Engineer (Europe and US Region)

What you'll do

DLP Alert Operations
• Receive, triage, and dispatch DLP alerts from the Europe and US regions; close alerts per established SOPs
• Maintain the DLP policy and rule library; identify false positives / negatives and propose tuning improvements
• Support rollout of data classification and grading policies in European and US office environments
Initial Incident Investigation
• Conduct preliminary review of DLP alerts, including evidence collection, employee interviews, and initial risk assessment
• Support senior engineers in traceback analysis and impact assessment for incidents such as data leakage, unauthorized outbound transfer, and unauthorized access
• Execute incident tiering and handling SOPs at the first-line level
• Assist in emergency response and remediation follow-up
Cross-functional Collaboration
Coordinate with overseas business, IT, HR, and Legal teams to drive incident closure
Support delivery of information security awareness training for Europe and US employees
Participate in localization of overseas data-protection workflows (e.g., GDPR, CCPA)

What we seek

• Foundational understanding of office network and endpoint security architecture
• Familiarity with DLP alert operations; basic awareness of UEBA and audit log concepts
• Basic log query and incident investigation skills
• English as a working language; strong written and verbal communication for emails, documents, and cross-border team interactions
• Open to occasional overseas business travel
• Chinese communication skill — strong plus. The role collaborates closely with the Shenzhen HQ and Hong Kong teams on a regular basis

What you'll need

• Bachelor's degree or above in Information Security, Cybersecurity, Computer Science, or a related field
• 0–2 years of experience in information security / data security; fresh graduates are welcome
• Hands-on or internship experience with DLP, endpoint security, or email security products is a plus
• Information security certifications such as CISA or CISSP