Senior Information Security Engineer

NIO is the leader of smart Electronic Vehicle (EV) industry in China, the fastest growing EV market in the world. We are rapidly expanding our footprint. By 2025, NIO plans to expand its presence to over 25 countries worldwide. The Information Security team is growing globally as well. Our goal is to build strong security capabilities to protect NIO’s business from current and emerging threats.  We’re seeking a passionate and self driven Senior Information Security Engineer to join our team. We are a global organization with talents in Information Security across the globe. Come join us today and be a part of NIO‘s exciting journey and growth.

Responsibilities

• Architect, engineer, and build tools to improve security capabilities and minimize risks in a globally distributed environment.
• Design and implement systems and processes to secure datacenter and public cloud infrastructure.
• Secure containerized applications using technologies such as Docker and Kubernetes.
• Work closely with DevOps and Engineer to embed security early into the SDLC process.
• Develop automated security and compliance capabilities in support of DevOps processes.
• Design and manage third-party, supply chain, and cloud vendor risks reduction and mitigation.
• Perform security risk assessment and identify risk mitigations for new projects, programs, etc.
• Manage continuous vulnerability management program; produce reports, metrics, and trending. 
• Develop and implement security baseline standards for network, systems, and applications.
• Lead security investigations and incident response.
• Act as a security champion in cross functional meetings and assist in creating a culture of security.
• Lead and mentor junior team members.

Requirement

• Preferred 8+ years of Information Security experience.
• Bachelor’s degree in computer science, information security, or related discipline.
• Strong knowledge of cloud and container security; security architecture, security engineering and penetration testing
• Familiarity with AWS, Containers and Kubernetes technologies and security concepts
• Experience with OWASP Top 10, ISO27001, NIST, CIS and MITRE ATTACK framework and controls
• Automation and scripting skills a must
• Strong problem-solving skills and excellent troubleshooting skills.
• Excellent verbal and written communication skills to document, communicate findings, and interact with business customers. 
• In case of emergencies, willingness to be available for immediate incident response and collaboration with the global team outside of normal business hours 

Desirable

• Security certification a plus

About NIO    NIO Inc. is a pioneer in China’s premium smart electric vehicle market. Founded in November 2014, NIO’s mission is to shape a joyful lifestyle. NIO aims to build a community starting with smart electric vehicles to share joy and grow together with users. NIO designs, jointly manufactures, and sells smart premium electric vehicles, driving innovations in next-generation technologies in connectivity, autonomous driving, and artificial intelligence. Redefining the user experience, NIO provides users with comprehensive and convenient power solutions, innovative Battery as a Service (BaaS) program, and other user-centric services. NIO began deliveries of the ES8, a 7-seater flagship premium electric SUV, in China in June 2018, and its variant, the 6-seater ES8, in March 2019. NIO officially launched the ES6, a 5-seater high-performance premium electric SUV, in December 2018 and began deliveries of the ES6 in June 2019. NIO officially launched the EC6, a 5-seater premium electric coupe SUV, in December 2019 and began deliveries of the EC6 in September 2020.Equal Employment Opportunity   NIO is committed to a policy of equal employment opportunity. We recruit, employ, train, compensate, and promote without regard to race, color, age, sex, ancestry, marital status, religion, national origin, disability, sexual orientation, veteran status, present or past history of mental disability, genetic information or any other classification protected by state or federal law. NIO US is an E-Verify employer.