Senior Security Engineer

About the role

Razer is looking for a hands-on Senior Security Engineer to join its Global IT Infrastructure team in Singapore. You will design, implement and operate the security controls protecting Razer's corporate infrastructure across network, endpoint, identity, Microsoft 365, on-premises and public cloud (Azure and AWS) environments, supporting offices across Asia Pacific, Europe and the Americas. You will also provide security assurance for enterprise applications and enterprise AI, including VAPT or coordinating vendors, and ensure AI agents and LLM-based applications are secure by design.

Key responsibilities

• Network security: firewalls, SASE / SSE and ZTNA, VPN, NAC, segmentation and web filtering
• Endpoint and server security: Microsoft Defender for Endpoint, Intune baselines, device compliance and disk encryption
• Identity security in Microsoft Entra ID: Conditional Access, MFA, PIM, ID Protection, access governance and hybrid identity
• Microsoft 365 security: email protection, Purview data loss prevention and sensitivity labelling
• Azure and AWS guardrails and cloud security posture remediation with Defender for Cloud and native AWS controls
• Vulnerability management and security reviews of infrastructure changes, including threat modelling
• Secure Microsoft 365 Copilot and enterprise AI, and assess AI systems for prompt injection and data leakage
• Run VAPT on applications, APIs, cloud workloads and infrastructure, and coordinate third-party VAPT
• Embed security testing in CI/CD pipelines (SAST, DAST, dependency and secrets scanning)
• Own the security roadmap, run security audits and close findings, and coach engineers on secure design
• Automate security checks with PowerShell, Python and Microsoft Graph API

Required profile

• Bachelor's degree in Computer Science, IT or equivalent, with 7+ years of IT infrastructure experience, including at least 4 years in infrastructure or enterprise security engineering
• Proven experience securing complex, international, multi-site environments
• Self-directed engineer able to lead security improvements across infrastructure, application and AI teams and explain technical risks to engineers and management

Required skills

• Microsoft security stack: Entra ID, Intune, Purview, Defender XDR
• SASE / SSE and ZTNA platforms, enterprise firewalls, NAC and segmentation
• Hybrid environments: on-premises Active Directory, Windows Server and Linux hardening
• Azure and AWS cloud security, vulnerability management tools (Defender Vulnerability Management, Tenable, Qualys)
• Hands-on VAPT (2+ years) with Burp Suite, Nmap, Nessus and CI/CD security tooling
• PowerShell and/or Python scripting
• Security frameworks such as ISO 27001, NIST CSF or CIS Benchmarks