Junior Cybersecurity Engineer – Security Operations

About the role

We are looking for a Junior Cybersecurity Engineer to join our Security Operations team in Singapore. You will help protect Xiaomi’s international digital assets by operating and enhancing core security solutions and supporting API security initiatives.

Key responsibilities

• Operate and tune security products such as WAF, MiShield and HIDS, configuring policies and expanding coverage for web and mobile applications.
• Develop real‑time monitoring and alerting frameworks, analyse security logs, and produce root‑cause analysis reports.
• Design and implement an API security framework, including abnormal‑behavior detection, access‑control policies and integration with API gateways.
• Manage the full vulnerability lifecycle – scanning, risk assessment, remediation and coordination with R&D for code fixes.
• Monitor global threat intelligence, run red/blue‑team exercises and maintain emergency response procedures.
• Ensure compliance with GDPR, Singapore PDPA and other regional regulations, preparing audit reports and providing security training to business units.

Required profile

• Bachelor’s degree in Computer Science, Information Security or a related field.
• Fluency in English and Mandarin (spoken and written).
• Professional certifications such as CISSP or CSSLP are a plus.
• Strong sense of responsibility, problem‑solving ability and teamwork across regions.

Required skills

• Experience with WAF, IDS/HIDS solutions (e.g., MiShield).
• API security design, OWASP API Top 10 knowledge and gateway policy deployment.
• Vulnerability management tools such as Nessus and Burp Suite.
• Scripting in Python and Shell; security automation development.
• Familiarity with SAST/DAST tools and shift‑left security practices.

What we offer

• Competitive monthly salary (SGD 4,000‑6,000).
• Opportunity to work on global security projects in a fast‑growing tech company.
• Professional development and certification support.