We are looking for a passionate and experienced Senior Information Security Engineer to join our top-tier tech team. You will be a key member of our security function, responsible for designing, implementing, and continuously improving security across our global multi-cloud environment. You will not only respond to security incidents but also drive forward-looking security strategies and technical innovation.

Key Responsibilities

• Threat Modeling & Incident Response: Build and maintain global cloud security incident response mechanisms, develop clear playbooks, and lead regular drills. Quickly handle complex security incidents, perform root cause analysis (RCA), and implement preventive measures.

• Security Architecture & Operations: Design, deploy, and maintain security solutions across multi-cloud platforms (AWS, GCP, Azure), ensuring architecture is scalable, resilient, and future-proof.

• Enterprise Security Leadership: Drive security strategy alignment with business processes, continuously raising organizational security maturity.

• Compliance & Automation: Ensure security practices meet international standards such as ISO 27001, ISO 27701, SOC 2. Promote security automation and “Security as Code” initiatives to improve operational efficiency.

• Vulnerability Management & Penetration Testing: Conduct regular vulnerability scans, risk assessments, and penetration tests. Track emerging threats and coordinate remediation efforts.

Qualifications

Required:

• Bachelor’s degree in Computer Science, Cybersecurity, or related field, with 3+ years of experience in information security.

• Strong expertise in cloud security, with hands-on experience in at least two major cloud platforms (AWS, GCP, Azure) and native security tools (e.g., AWS Security Hub, GCP Security Command Center).

• Solid Linux system security skills, including hardening, log analysis, intrusion detection, and incident response.

• Proven ability to handle high-pressure security incidents and perform clear post-incident reviews.

• Strong knowledge of web and application security, with experience in penetration testing and code audits.

Preferred:

• Recognized contributions to bug bounty programs or high-quality vulnerability reports.

• Strong performance in CTF competitions or deep interest in offensive/defensive security research.

• Professional certifications such as CISSP, CISA, OSCP, AWS/GCP/Azure security certifications.

• Experience developing security tools or automation scripts using Python, Go, or similar languages.