1.Mainly responsible for business: penetration testing, original detection code, offensive and defensive drills and other information security services. 2.Evaluate and analyze vulnerabilities, impact and risk findings 3.Work with senior security member to perform security training across internal teams 4.Information security/personal information protection and introduction/periodic education and training promotion. 5.Information security risk assessment assistance for information import and system development projects 6.Information Systems Operational Continuity Plan: Improve planning and incident response management.