Office Network Security Manager 办公网安全负责人

About us

Bitget is the world's largest Universal Exchange (UEX), serving over 125 million users and offering access to over 2M crypto tokens, 100+ tokenized stocks, ETFs, commodities, FX, and precious metals such as gold. The ecosystem is committed to helping users trade smarter with its AI agent, which co-pilots trade execution.

Bitget is driving crypto adoption through strategic partnerships with LALIGA and MotoGP™. Aligned with its global impact strategy, Bitget has joined hands with UNICEF to support blockchain education for 1.1 million people by 2027. Bitget currently leads in the tokenized TradFi market, providing the industry's lowest fees and highest liquidity across 150 regions worldwide.

What you'll do

• Responsible for the construction of the office network security system, including office network security planning, architecture design and implementation.
• Establish a deep defense system covering the office network, terminal devices, identity authentication, remote access, office SaaS and enterprise internal infrastructure.
• Formulate office network security standards, technical specifications, security baselines and security management systems.
• Be responsible for the company's EDR, terminal control and terminal detection response platform.
• Be responsible for the office network security architecture, including firewalls, VPN, DNS security, network partitioning and traffic control.
• Be responsible for the construction of enterprise identity authentication and access management systems, including SSO, SAML, OIDC, MFA, RBAC, etc.
• Establish an office network security monitoring and operation system, and improve the capabilities of log collection, alarm analysis, threat detection and automated response.
• Be responsible for the construction, management of the office network security team.

What you'll need

• 8 years or more of experience in enterprise security, network security or IT infrastructure security; 3 years or more of experience in team management or as a security project leader.
• Those with experience in the security construction of large-scale internet, fintech, exchanges or multinational enterprise office networks are preferred.
• Familiar with terminal security technologies such as EDR and XDR, and have practical deployment and operation experience with products like CrowdStrike, Microsoft Defender, and SentinelOne.
• Familiar with the security mechanisms of macOS and Linux operating systems, and possess the capabilities of terminal security baselines, access control, and malicious behavior analysis.
• Have practical experience in implementing the Splunk operation system, and be proficient in writing SQL/SPL (Splunk) query statements.
• Familiar with the MITRE ATT&CK framework, and understand APT attack chains, lateral movement, credential theft, persistence, and internal network penetration techniques.
• Have experience in security incident emergency response, threat hunting, host forensics, and attack traceability.

Give priority to

• Have experience in the construction and operation of enterprise security products such as CrowdStrike, Wiz, Jamf, and Palo Alto.
• Have experience in enterprise security construction for large exchanges, fintech or digital asset platforms.
• Have experience in investigation and handling of advanced threat attacks such as Lazarus, APT, and ransomware.

岗位职责：

• 负责办公网安全体系建设，办公网安全规划、架构设计和落地实施。
• 建立覆盖办公网络、终端设备、身份认证、远程访问、办公 SaaS 及企业内部基础设施的纵深防御体系。
• 制定办公网安全标准、技术规范、安全基线及安全管理制度。
• 负责公司EDR、终端管控及终端检测响应平台。
• 负责办公网络安全架构，包括防火墙、VPN、DNS 安全、网络分区及流量管控。
• 负责企业身份认证和访问管理体系建设，包括 SSO、SAML、OIDC、MFA、RBAC 等。
• 建立办公网安全监控和运营体系，完善日志采集、告警分析、威胁检测及自动化响应能力。
• 负责办公网安全团队的建设、管理。

任职要求：

• 8 年以上企业安全、网络安全或 IT 基础设施安全相关工作经验，3 年以上团队管理或安全项目负责人经验。
• 具备大型互联网、金融科技、交易所或跨国企业办公网安全建设经验者优先。
• 熟悉 EDR、XDR 等终端安全技术，具备 CrowdStrike、Microsoft Defender、SentinelOne 等产品的实际部署和运营经验。
• 熟悉 macOS、Linux 操作系统安全机制，具备终端安全基线、权限控制及恶意行为分析能力。
• 对Splunk运营体系有实际落地经验，熟练编写 SQL/SPL（Splunk） 等查询语句。
• 熟悉 MITRE ATT&CK 框架，了解 APT 攻击链、横向移动、凭证窃取、持久化及内网渗透技术。
• 具备安全事件应急响应、威胁狩猎、主机取证及攻击溯源经验。

优先考虑

• 有 CrowdStrike、Wiz、Jamf、Palo Alto 等企业安全产品的建设和运营经验。
• 有大型交易所、金融科技或数字资产平台的企业安全建设经验。
• 有 Lazarus、APT、勒索软件等高级威胁攻击调查及处置经验。

Why Bitget?

• Bitget is the world's leading web 3 platform for copy trading and one of the world's largest and most respected exchanges
• We are a global company with staff members from over 50 different countries and regions
• We are growing and looking for world-class ambitious talents to help us continue this journey
• We have a streamlined structure that empowers employees to work efficiently, delivering the best results in a short timeframe
• We offer competitive salaries and benefits
• Blockchain technology and digital assets have the potential to change finance in a way no other technology can - be part of it!

If you are ambitious and believe that digital assets could be the next financial and technological revolution, please apply!

For more information regarding candidates' personal data processing, please refer to Bitget Candidate Privacy Notice.