罗氏促进多元化、公平性和包容性，代表我们所服务的社区。在全球范围内处理医疗保健问题时，多元化是成功的关键因素。我们认为，包容性是理解人们不同医疗保健需求的关键。我们共同拥抱个性，共同抱持对卓越护理的热情。加入罗氏，每个声音都会得到重视。

职位

The Opportunity

In the position of Principal DevSecOps Engineer you will join the China
Digital Platform team and will be part of the Cloud security team.

As a Cloud Security Engineer with good experience in monitoring and improving
DevSecOps tools and processes, you will automate routine tasks and improve
system reliability.

You will also play a critical role in providing technical support for
day-to-day security operations, security tool integration, automation support,
change management and business continuity programs.

You will:

1.Ali Cloud topology and Security Services:

*
Demonstrated expertise and working knowledge of the Alibaba Cloud and its
security services.

*
Ability to understand and navigate the various security features and controls
offered by Alibaba Cloud.

2.Security and Compliance Requirements:

*
Collaborate with the team to define and implement security and compliance
requirements for our Ali Cloud landing zone and organization.

*
Ensure adherence to industry standards and best practices while considering
the specific needs of operating in China.

*
Stay updated with the latest security trends and technologies in the Alibaba
Cloud ecosystem.

3.Security Event Capturing and Management:

*
Architect and implement a robust security event capturing and log management
system (SIEM).

*
Monitor logs, security vulnerabilities, and threats to proactively identify
and respond to potential security incidents.

*
Develop processes to generate timely and accurate security alerts for
effective incident response.

4.Automation and Collaboration:

*
Automate the process of sending security alerts to Security Champions of each
product.

*
Collaborate with cross-functional teams to ensure prompt and coordinated
response to security incidents.

5.Tool Evaluation and Implementation:

*
Identify, define, conduct Proof of Concept (PoC), and enable/implement tools
to secure Alibaba Cloud accounts.

*
Evaluate and recommend appropriate security tools and technologies based on
specific requirements.

6.Identify, integrate, monitor and improve infosec controls by understanding
business processes.

7.Assist with complex projects and automation of day to day security
operations to improve SLA

8.Experience with container and container orchestration technologies Docker
and Kubernetes

Who you are

You’re looking for a challenge where you have the opportunity to pursue your
interests across functions and geographies. Where your passion for technology,
delivery, reliability, and operational excellence will impact the lives of
patients fighting cancer and many other disease areas in the future.

You have a degree in computer science, engineering, or other related fields,
or equivalent experience. You bring experience working in a multicultural
environment and proven cultural awareness.

You have extensive experience with automation in CI/CD tools, methods and
processes, including development of multi-environment pipelines (e.g., Jenkins,
GitLab CI/CD,...), and Containerization/Orchestration, including Docker