Huawei Consumer Business Group (CBG) are growing in an extremely fast-paced and we are now in top 3 smartphone makers.

We are looking for an experienced, self-driven, and motivated Principal Information Security Specialist to join Huawei Mobile Service to strengthen the security of our cloud ecosystem.

As the owner of information security domain in Huawei Mobile Service, you will:

Understand thoroughly and ensure compliant on Huawei Security Requirements & Management and adapt to local and International regulations. Participate in policy, standards and processes definition and communicate to the organization.

Assess, upkeep, mitigate the security risk of cloud services in collaboration with R&D, security teams, O&M, privacy teams.
Direct security operations, certifications, vulnerability, penetration, incident management based on ISO, NIST CSF standards and ensure business continuity.
Establish and drive business unit-wide training and specialized security training/awareness programs for executives and privileged users.
Serve as a liaison with external authorities for all issues regarding information security.

Requirements:

An understanding of the security landscape and advantages unique to security and privacy in large scale, cloud-native, distributed consumer cloud services.
Deep familiarity and knowledge of various security frameworks (NIST CSF, ISO27001, ISO 27018)
Systematically building the security system of “Application Service Provider”, and understand IPDRR, CYBER KILLCHAIN ,ATT&CK-model
Proven track record of applying security practices to data processing and handling.
Hands-on experience in threat modeling, security assessment, vulnerability and risk analysis.
Hands-on experience and deep knowledge in Intrusion detection & prevention, ethical hacking and penetration testing.
Solid understanding of how network and network protocols work.
Solid understanding of HIDS/NIDS, WAF, RASP, network scanning, anti-DDOS solutions.
Application Scenario of various threat intelligence services and system in security system
In-depth research on Web security, familiar with the origin of various Web security problems and solution, having a tracking of Security threats of network
Expertise in testing web application vulnerabilities and Network vulnerabilities.
Hands On experience in various network/host/ web application penetration testing / Red team testing
Thorough understanding of web application vulnerabilities like XSS, SQL injection, session hijacking, authorization bypass vulnerabilities etc.
Python or other scripting languages and can develop automation tool of security Analysis independently is added advantage.
Hands-on experience in security architecture design, application development is a plus.
Experience with various cloud environments and technologies.
Strong communication and collaboration skills with various level of executives from top managements to technical team members across the organization.

Experience Level: 10+ years

It will be great if you have the skills below but not mandatory:

Adequate connections in local and international security community.

Experience with the building of security system of “Application Service Provider”
Security operation and maintenance experience with a cloud deployment of 10K+ servers
Experience with WEB vulnerability mining and participated in actual penetration testing activities, familiar with various bypass technology.
OSCP certification or CREST certification preferred

About Huawei Technologies India Pvt Ltd:
Huawei Technologies India Pvt Ltd is engaged in component/platform/product development aligned with Huawei’s global product development strategy, roadmap, architecture & solutions.

Established in the year 2000 in Bengaluru, the India Research center is engaged in developing cutting-edge software solutions, products and platforms in the areas of IP based data transmission networks, intelligent networks, BSS, OSS, terminal devices and future-oriented technologies including SDN, big data, cloud, mobile internet, digital services.

With employee strength of over 3000 software engineers, market technical support engineers and management professionals, the India R&D center is one of the largest overseas software development center of Huawei. Huawei India R&D Center has evolved to play a bigger role in the innovation journey of Huawei, develop future-oriented technologies, and support the digital transformation of the society.

About Huawei Global:
Huawei is the leading provider of telecommunications equipment and mobile device in the world with a strong focus on innovation. We have more than 43,600 employees engaged in R&D and have established 17 research institutes in countries including the U.S., Germany, Sweden, Russia, India, Finland and China to ensure global R&D with outstanding people. We have set up over 20 joint innovation centers with top operators to transform leading technologies into a competitive edge for customers and achieve business success.
We are recruiting talented professionals to join the new team. Huawei is a fast-growing international company, which can provide global opportunities for your career development with competitive salary structure. We have innovative co-workers and multicultural environment. Come and build the mobile and wireless future with us!