全职 Senior Security Governance Engineer - Infrastructure Security 工作, 薪水, Shopee 公司招聘中 - Ricebowl

About The Team

We are looking for a senior security engineer to support security governance projects and optimise security tool operations. This role requires a strong technical foundation in security engineering, risk management, and automation, along with the ability to drive security initiatives, improve workflows, and collaborate across teams.

You will be responsible for managing security risks, ensuring operational resilience, and maintaining high availability of security tools and monitoring systems. This role involves not only hands-on security engineering but also enhancing security processes, driving efficiency, and improving overall visibility into security risks.

Job Description

• Drive security risk governance projects by identifying vulnerabilities, prioritizing remediation efforts, and working with teams to implement security controls effectively.
• Conduct deep technical assessments of network architecture, infrastructure operations, and internal core systems to proactively mitigate security risks.
• Work closely with Engineering, Infrastructure, and DevOps teams to integrate security best practices into system design, ensuring reliability, scalability, and security.
  
  

Requirements

• Minimum 3 years of experience in cybersecurity, security governance, security tool operations, or infrastructure-related fields
• Familiar with real world intrusions, in-depth understanding of the how common hacking tools and attacking vectors work
• Strong hands-on experience in proactively identifying technical / procedural risks related to IT infrastructures
• Proficiency in security automation and scripting (Python, Bash, or similar)
• In-depth knowledge of infrastructure security, vulnerability management, and system hardening across on-premise and cloud environments
• Strong analytical and problem-solving skills, with the ability to manage multiple security initiatives while balancing operational demands
• Excellent project management, documentation, and communication skills, ensuring alignment with cross-functional teams and leadership
• Ability to translate complex security risks into actionable insights for both technical and non-technical stakeholders