Collaborate with the Group’s physical security team to continuously review existing security systems and provide recommendations for ongoing improvements.
Reference to regulator’s notices, circulares and guidelines (such as, TRM, Cyber Hygiene) to assess risk and gaps, and work with Line 2 and Tech to improve policies and processes to mitigate risks, minimize their impact to operations
Build a threat model and engagement plan prior to execution: define the target, likely adversary profiles, attack paths, success criteria, and safety constraints before any action is taken.
Conduct incident response and traceability analysis for traffic security incidents in the e-commerce field, sort out attack paths and defense vulnerabilities, and output standardized incident analysis reports and optimization suggestions.