全职 Security Engineer 工作, 薪水, SGB 公司招聘中 - Ricebowl

Responsibilities

• Lead collaborative threat-modeling sessions with product managers and architects during the design phase of new features.

• Design and implement robust “least-provilege” access models for both human user and service-to-service communications.

• Design, analyse and validate security controls across cloud infrastructure environments.

• Develop & run secure SDLC practices, integrate automated SAST, DAST, SCA.

• Run vulnerability management program, prioritise and coordinate fixes.

• Conduct internal information security risk assessments and manage security risk evaluations of external vendors and partners.

• Develop security standards and best practices as needed.

• Participate and lead security investigation and response to incidents as needed.

• Conduct periodic sharing sessions, i.e. the OWASP Top 10 and secure coding patterns.

Qualifications required

• Bachelor's degree or above in Computer Science, Information Security, or a related field.

• 3+ years in Product Security, AppSec, or DevSecOps roles.

• Solid foundation in security, SDLC, and DevSecOps framework, proficiency in Java.

• Experience in Threat Modeling (STRIDE/PASTA) and performing architectural risk assessments.

• Hands on experience on security tools such as WAF, firewall, and Tenable, Burp Suite, CodeQL.

• Strong sense of responsibility, excellent communication and team collaboration skills, with the ability to analyze and solve problems independently.

• Proficient in written and spoken English.

Preferred Qualifications

• Possession of industry-recognized security certifications (e.g., CISSP, OSCP) is preferred.

• Deep knowledge on compliance framework, i.e. ISO 27001, SOC2.