施耐德Product Security Expert
任职要求
1. Bachelor's or higher degree in Computer Science, Software Engineering, Electronic Information Engineering or Cybersecurity; 2. At least 5+ years of hands-on experience in a similar role; 3. Proven experience of working in an Engineering/R&D department following a Secure Development Lifecycle based on standards such as IEC 62443-4-1, ISO 21434, or Microsoft SDL with a proven ability to engage with management and development teams; 4. Demonstrated project management, communication and teamwork skills, including the ability to write concise reports, summaries, and presentations; 5. Familiar with embedded device security, experience in OT device/system is plus 6. Familiar with at least one programming language (Python, C/C+, Golang, Java, JS, etc.) and able to solve security problems with code; 7. Proven experience in cloud security, with certification in cloud security (e.g., CCSK, CCSP) preferred; 8. Holds cybersecurity certifications preferred, such as CISSP, CSSLP; and/or ISA / IEC 62443 Expert; 9. Knowledge of AI security, cloud-native security, mobile (Android, IOS) security; 10. Workable English is mandatory; 时间表: 全职 请求编号: 009IF8
工作职责
1. Identify, assess the product security related risk and drive the risk mitigate 2. Monitor product security related compliance to local Laws/Regulations/National Standards,and convert local cyber、data protection & privacy demand into product requirement, guarantee compliance 3. Act as relay among Product Security stakeholders, communicate, coordinate, facilitate and support BU CSOs, Product Owners, Security Data Privacy Advisors, R&D for FCSR, SDL and other product security initiatives & topics 4. Act as local owner & coordinator to handle severe product security issues 5. Drive the SDL deployment in China C4C offer creation projects 6. Monitor local SDL maturity and drive action plan to improve

Design and optimize the security architecture of products and solutions based on business needs and industry trends. Evaluate the effectiveness of existing product security architectures, identify potential security risks, and provide improvement recommendations. Participate in product planning and design to ensure security considerations are incorporated from the early stages. Conduct security risk assessments for products and solutions, identifying potential security threats and vulnerabilities. Develop security strategies and processes, ensuring that product development and operations adhere to unified security standards. Design and implement security controls such as data encryption, access control, and vulnerability management. Collaborate closely with business departments, development teams, and operations teams to ensure the effective execution of security strategies. Provide technical guidance and training to enhance the team's security expertise. Ensure company products and solutions comply with industry and middle east regulations, standards, and best practices. Monitor and interpret changes in industry security standards and regulations, and make timely adjustments to company security strategies and architecture.
• Review, author, and optimize high-quality, extensible web and mobile code (React, React Native, Swift, Kotlin) to meet team standards for performance, security, testability, reliability, and maintainability. • Integrate automated static analysis (ESLint, SonarQube) and testing frameworks (Jest, XCTest) into the CI/CD pipeline, and provide timely, insightful code reviews to drive adherence to best practices and accelerate development. • Define and own the architecture and design of web and mobile features, producing clear design documents, trade-off analyses, and testability plans that ensure performance, scalability, reliability, security, and compliance across the entire stack. • Identify upstream and downstream dependencies, model system interactions, and collaborate with cross-functional teams to validate design hypotheses, integrate AI-driven testing strategies, and continuously improve test coverage, defect localization, and overall solution quality. • Lead security, privacy, and compliance excellence by embedding “security as code” invariants, implementing deployment gates and automated scanners, instrumenting telemetry and audit trails, conducting threat models and incident drills, and collaborating with cross-functional security partners to uphold global and local regulations. • Integrate end-to-end observability into web and mobile services by instrumenting comprehensive logging, telemetry, and real-time dashboards for performance, availability, and security; serve as the DRI on on-call rotations to swiftly diagnose and remediate incidents, drive root-cause postmortems, refine troubleshooting guides, and implement automated alerts and mitigations to continuously boost reliability and supportability. • Partner with product managers, privacy/security experts, technical leads, and customer-facing teams to elicit, validate, and prioritize user requirements for web and mobile solutions, embedding continuous feedback loops with quantitative metrics (usage patterns, performance) and qualitative indicators (accessibility, globalization), while championing end-user privacy and security throughout the development lifecycle.
The Assortment, Content & Ads Governance Team (ACAG team) is part of the Lazada’s Risk and Security, and it is charged with the mission of developing a comprehensive strategy for Lazada with regards to assortment, so as to foster a healthy and safe e-commerce environment for our users. The role is responsible for developing and implementing proactive strategies and operational processes to protect users from Assortment and Content related risks (Prohibited and Controlled Goods, IP infringement products, hate speech etc). You will have access to analytical tools to develop and implement strategies and solutions using data driven methodologies to mitigate the risks associated with platform assortment and content. Responsibilities: - Develop a deep understanding of the eCommerce customer and seller journey, including registration and onboarding, product listing, order placement, payment, user interactions, returns and refunds, user reports and feedback, etc. - Develop subject matter expertise on eCommerce platform operation and governance, where rules, strategies, and enforcements are effectively established to ensure users are compliant with platform policies. - Lead cross-functional efforts to enhance platform policies and operational mechanisms, fostering a collaborative environment to support ongoing strategy refinement. - Work with large data sets to analyze patterns, trends, and modus operandi of platform operation and governance issues (as well as merchants who perpetrate these issues). - Make data-driven recommendations on prioritization of controls for platform governance and product compliance. - Collaborate with PD, Tech, and Algo counterparts to build machine learning models and rules to detect assortment and user related operation and governance issues on the platform. - Operate the risk engine, including the creation and continuous evaluation of rules to prevent and detect platform operation and governance issues. - Capture and communicate findings with internal and external stakeholders through dashboards, periodic reports, and presentations.
Customer and Industry InsightsApplies expertise (deep expertise across few accounts or broad expertise across many accounts) and thought leadership to identify and inform the development of the right Industry Sales Kits and industry partners within the customer's vertical industry. Articulates and understands specific industry-related market trends, as well as customer threats, opportunities, and barriers to growth as they relate to the customer's broader industry. Leverages industry trends from other industries to gather insights and develop an informed perspective on similar issues that may occur within their industry/industries. Applies industry knowledge to support customers in solving issues.Synthesizes and combines various business and industry insights from their team, global best practices, proof points from experience/case studies with countries and/or regions, and deep industry expertise (e.g., level 200) related to customers and their competitors to conduct forecasting and develop recommendations for managing accounts and subsidiary planning. Ensures that all levels of the organization challenge customers to consider alternatives and adapt strategies, plans, business models, and solutions to insights. Orchestrates cross-regional teams to gather information, collaborate on performance markers, and identify potential risks in customer accounts. Oversees technical teams for driving opportunities with others, as necessary. Brings in business and industry insights to address the broader business challenges for the customer and deliver solutions. Differentiated Value PropositionPartners with a line-of-business leader or senior executive within a large-scale or high-impact customer organization to articulate how complex Microsoft technology/services will meet future business needs better than the competition and will enable the achievement of long-term growth and success. Provides an outside-in view around existing and emerging compete or other solutions that are also a requirement for the customer.Acts as the customer's Technology Mentor in established relationships with a line-of-business leader or senior executive within a large-scale or high-impact customer organization senior leaders, including technical decision makers (TDMs) and/or Business Unit leaders at the C-level (e.g., HR, Risk, Finance leadership). Develops extended relationships beyond core customers, advises on solutions, and aligns Microsoft capabilities with customer needs. Drives market share (e.g., cloud, collaboration, AI). Leads customer business transformations through digital technologies for assigned accounts to drive business outcomes and create business value for customers by understanding customer industry and position to provide guidance and to challenge customer thinking with innovative ideas that showcase the need for change and new strategic direction, and proactively involves corporate and cross-industry resources to drive customer transformation. Ensures line-of-business wins are captured (e.g., customer write-ups) as reference for scale, and represents the face of the business during public relations events for significant business wins. Education and Thought LeadershipLeads customer technology engagement by engaging and influencing technical resources of customer, partner, and Microsoft towards customer’s business transformation. Delivers regular (e.g., quarterly, monthly) industry/technology briefings to customer technology senior decision-makers technical teams.Uses existing and new readiness resources and demonstrates expertise in creating enablement plans for large and high-stakes customers, and all-up Microsoft business. Drives innovations to help customers meet capacity and capability goals, maximize reach, and impact and drive long-term engagement and thought leadership on the Microsoft platform, and influences large customers to see and adopt the strategic value. Drives customer skilling initiatives and execution. Mapping and Account PlanningEstablishes best practices and standards around account planning for budgeting, quota attainment, consumption goals, and customer consumption gaps to inform quarterly and fiscal objectives. Coordinates highly complex extended account teams (e.g., spanning complex technologies, geographies, functions) and drives forecasting and tracking of the business. Owns the technical portion of the account plan and leads the customer plan delivery for large, critical, and/or strategic accounts. Captures all Account Planning input in MSX D365 Account Plan.Helps customer technical specialists build the message to sell Microsoft offerings to other parts of their business or end users. Creates stakeholder maps for accounts, determines, and orchestrates a coverage plan, and builds out an execution framework across multiple Rooms of the House of the customer.Orchestrates internal teams and local partners (inclusive of global systems integrators and consultancy partners) to ensure sufficient technical resources for demand generation, when appropriate. Technology Sales: Demand Generation and OrchestrationLeads Account Strategy Envisioning (ASE, formerly IDTA) with the extended account team, customer, and partner to deliver the outcomes for the customer through joint envisioning, as a vehicle for Industry Sales Kits and Solution Plays. Creates new Stage 1 opportunities, both billed and consumed, with technical decision maker (TDM) customer stakeholders, managing consumption pipeline with extended team to maintain velocity, and unblocking issues. Coaches peers (often as a mentor across a region or country) on how to create and maintain an opportunity initiation and how to map Microsoft priorities to opportunities. Defines the blueprint for opportunity initiation, and sets and shares standards and best practices for others to follow.Leads the customer journey into the era of AI and Industrial Metaverse by creating a targeted approach tailored to their current business requirements and positions Microsoft as a leader for the future, both for accelerating productivity as well as helping the customer create new capabilities to support their business. Leverages expertise of current technology landscape and understanding of AI and Industrial Metaverse capabilities to plot the foundational elements on the technology roadmap that need to be in place to realize value for the customer. Builds a mid-term strategy for AI and metaverse projects as well as an immediate opportunity pipeline and orchestrates execution through the appropriate technical teams from the Specialist Team Unit (STU) and with appropriate PartnersCreates, develops, and drives opportunities based on industry best practices, presents opportunities to the customer, and creates demand. Develops a plan, within a broader strategy, to create and qualify a set number of opportunities for product sales, solutions sales, or consumption. Leverages partners and multiple channels (e.g., social media) to create demand. Orchestrates efforts to drive MCEM lifecycle and stage progression. Leverages experience and strategic foresight to lead technical teams by driving opportunities with Specialist Team Unit (STU), Customer Success Unit (CSU), and others, as necessary. Leads efforts to reach out to key stakeholders to give customer-driven pitches and drives the appropriate customer reach together with the account executive to generate new demand. Uses advanced technical knowledge of products to determine feasibility of technical customer requirements requests and works with core engineering teams to prepare solutions. Technology Strategy FormulationCreates mid- and long-term (e.g., 12 or more months) multi-horizon technology and business roadmaps for highly prominent, challenging, and/or strategic accounts based on a deep understanding of business and technology priorities and industry landscape. Challenges and validates the strategy and plan with customer stakeholders and drives envisioning and articulates business and program changes in the roadmaps around new and groundbreaking capabilities. Leads the translation of the customer's business objectives in conjunction with Industry Sales Kits and Solution Plays (including consumption-heavy workloads and cloud services) to develop an effective Industry Technology Architecture to plans for and drives consumption and adoption of Microsoft cloud and a higher share of customer potential and propensity (CPP).Leads analysis of overall customer needs, outcomes, and blockers. Determines key stakeholders for driving execution on the largest and/or most complex accounts. Partners with global executives to lead overall strategy development (e.g., blocker identification, partner strategy) to identify and address gaps and drive end-to-end solutions. Leads the adoption of technologies by plotting the long-term vision of the customer's business strategy and driving action to bring to fruition.Leads and ensures execution of technology strategy and digital transformation by anticipating and/or leading the resolution of technical blockers that arise during strategy planning and implementation, and driving technology adoption. Trusted AdvisorLeverages a broad knowledge of Microsoft's product landscape, solutions, and strategy to address customer's needs. Proactively coordinates with internal and external network of industry experts (e.g., Regional Experts, industry-specific partners) to build strong knowledge of the industry and the competitive landscape. Drives and leverages leaders from the partner ecosystem to bridge process gaps. Leverages deep understanding of their customer to share knowledge with extended team and leverages advanced knowledge of competitors to promote customer business perspectives. Partners with others (e.g., enterprise-channel managers) to provide sponsorship and increase impact.Provides Account thought leadership inclusive of information technology (IT), business strategy knowledge, and technology landscape, and shares best practices internally while providing coaching to subsidiary resources. Leverages account thought leadership in partnership with account executives to set strategy, own accountability for outcomes, and lead extended teams. Provides technical guidance to internal teams to position technology while using customer landscape knowledge. Creates connections and feedback loops with Product and Engineering teams.Acts as the voice of the customer, industry, and internal advocate by providing insights, feedback, and challenges from the customer to internal teams (e.g., product groups, engineers) across all levels of the organization. Drives action to ensure that internal teams understand and respond to insights. Articulates the business opportunity for Microsoft based on product gaps.Creates security thought leadership with the customer's executives (e.g., technical decision maker [TDM]/business decision maker [BDM]) using the Microsoft Security and Zero Trust narratives and engages TDM and BDM stakeholders to position security as a business enabler and instill a security mindset in all aspects of the customer's technology landscape. Uses their understanding of the customers' technology and security needs to establish Microsoft’s security credentials and to build opportunities to improve the customer's security posture and orchestrates execution through security specialists.