Da Li Email & Phone Number

北京市

Responsible for the overall security work in Megvii and it`s member companies. Lead 10+ persons scurity team to protect product and data security, keep company comply with privacy data regulations in China and other countries, assist company business achievement.Make a good environment to motivate employees development, encourage employees to enhance their skills by training, certification and internal sharing. Lead and guide everyone in team to achieve their targets. Lead the data security team to win the “Best Project Award”, and lead the product security team won the TC “Technology Breakthrough Award”.Security work cover ISMS，policy and PII compliance. Product security cover IoT device/software security , SDLC , pentest, vulnerability scanner, DAST/IAST. Data security cover enterprise RD code protection, business data, PII data protection etc. Design data classification and label, use DLP and audit logs to realise visualization of the sensitive data flow, make every user`s data action can be traced. Infrastructure security cover IDC, Cloud ECS, K8s Docker. Implement HIDS/NIDS/Honeypot, Zero trust, security gateway toghther to achieve defense in depth, use splunk to analysis intrution and response. Use more self-development tools to optimise security work efficiency such as in vulnerability repair, alert notice and security incidents operation etc. processes.

Beijing

Built and managed a 5-member info security team for the company. Lead a high performing team to work on all aspects of info security technical work, management work and compliance work, built the security system and protection for corporate IT infrastructure, APP systems and IT business risk.Completed the risk assessment for the company, coordinated with the OP team and RD team to fix the vulnerabilities, built the security process from APP development to system go-live ; Provide secuity SDL training and knowledge to RD/QA/OP teams. Develop a automatical vulnerability scanner base on opensource for the regular scan work.Establish the security strategy and framework to support company business and meet online-edutiation industry requirements, Designed a security network architecture based on the Public Cloud, and achieved separation of production network and development network, optimized the FW access rules , deployed WAF and Honeypot to protect network intrusion on the cloud environment; Harden the server configuration and built OpenLDAP to achieve the centralized authentication for the employee; Built the VPN and WIFI authentication to secure the network access.Built the log and security operation and monitorning platform, collected and monitored the network log, server log, app log and security log , designed the threat modeling and alart rules can help security team got alert message timely and built the security dashboard to display the security posture.Built the info security management system, comply with the China Ministry of Public Security and Ministry of Education regulations and meet the company buisness risk requirements. Organized the security training and enhanced the employee info security awareness.

Lead Lenovo SOC operation and team management work, managed and monitored globe 30,000+ servers and 50,000+ terminals , Guide team member daily operation monitoring tools, coordinate inciednt response and process, and guide team members to analyze and deal with security events and logs. Successful built log and threat analysis platform to support security incident response and investigation, successful migrate opensource software ELK/Spark/Kafka to Splunk , integrate symantec TI(threat intelligence) to find out potential intrution activity. The SOC platform can provide incident investigation , threat/vulnerability/patch/asset centralise and correlated display. Achieve scenario include abnormal logon detection, non authorization command execute alert, data leakage monitoring, VIP user security posture analysis etc. The SOC platform got company CIO innovation award.Also had responsibility of Lenovo company cyber security mgmt. and security technical architecture design, Researched new biz security solution design and implement. Support security incident response and threat analysis, provide log mgmt. product for Lenovo & SAP commercial cloud solution. Design,optimize and promote security standard in all company, guide the risk assessment and vulnerability fix work.Lead the lenovo Openstack private cloud security architecture design , work with team to develop and test cloud security products and technical solutions(include vurtial machine and vurtial network), optimize the access control functon of openstack, achieve security self-service on private cloud, promote the security protection level of private cloud. Provide Lenovo E-commerce website security solution design and implementation, guide investigation and construction of E-commerce biz security risk control product.

Beijing

Provide leadership, direction and undertake to the IS/IT risk business portfolio and lead ICT consultant project bidding/delivery team;Team management and Project management,coordinate with different departments to bulid a delivery team or handle problems.Know well Huawei internal IT and Security practice.Participate in improvement and optimization company internal security management policy and IT risk control. Business Development (IS and IT risk portfolio) Service portfolio, solution package and opportunity pipeline management  Internal and external relationship management Channel and vendor management, opportunity development, negotiation and bidding Design and implement assessment risk treatment technologies solution and project Responsible for leading delivery of ICT consulting services Information Security Management System/ISMS--ISO27001/ ISO27001 certification ICT technical solution design & implementation Define IS strategy and architecture design and planning  Develop, document and maintain security policies, processes, control and measurementGot ISO27001 LA and CISP certificate.

Shenzhen, Beijing

 IT/IS consultant project management and delivery. ISMS establishment and implementation service and help customer pass ISO27001 Certification. IT governance, IT risk and IT internal control, ITIL and DR consulting service. Regulatory-oriented security consulting and implementation services, i.e. Security Classified Protection of Information System Security architecture design and planning service  Information and network security technical solution. Security assessment, hardening and IT audit service.

Shenyang

 Wroked for China Unicom C/G network management system development and maintenance , Managed network equipment (Cisco /Huawei), Linux server (HP/SUN) and database(Informix/SQLserver/Oracle) and application system .  Useing Perl,C, VB.net and Linux shell script for development on HP/SUN UNIX & Windows OS.  Familiar with TCP/IP,got CCNP certificate.