Senior Security Operations Engineer, AIDC

About the role

Bitdeer's AI Cloud security team is expanding its Asia-Pacific security operations. This role owns the full-stack security operations for Asian AI data centers (AIDCs), covering detection engineering, incident response, host and network hardening, vulnerability management and security tooling development. It sits within a global 7x24 security operation, coordinating with Americas and European teammates so that all AIDCs are monitored continuously.

Key responsibilities

• Monitor and respond to security alerts 7x24 on call, covering Asia while Americas and Europe are off hours, and handle L2/L3 incidents such as anomalous GPU usage, cryptojacking, SSH brute force, container escapes and network anomalies
• Take part in P0/P1 incident response, maintain incident response playbooks and runbooks, and lead post-incident root cause analysis
• Operate the SIEM (Wazuh / Splunk / Elastic SIEM or equivalent) daily, write detection rules for GPU cloud attack vectors, and run HIDS and eBPF tools (Tetragon / Falco)
• Hardening of AIDC servers (Linux CIS baseline, auditd, SSH, privileged accounts), tracking CVEs for GPU drivers and firmware, supporting IAM and vulnerability management
• Firewall, IPS/WAF and network traffic analysis (NetFlow / IPFIX), IB/RoCE monitoring, and DDoS response support
• Build security automation scripts, test in-house security products, and maintain the SOC knowledge base
• Hand off security events to Americas teammates and support SOC 2 and ISO 27001 evidence collection

Required profile

• Bachelor's degree or higher in Computer Science, Cybersecurity, Computer Engineering or a related field
• 5+ years of information security experience, at least 3 in cloud infrastructure / IaaS / data center security operations
• Independent incident response capability as an L2/L3 analyst or IR team member
• Professional fluency in both English and Mandarin Chinese (hard requirement)
• Willingness to work irregular hours and take on-call duty during major incidents

Required skills

• Strong Linux hardening (CIS benchmark, auditd, iptables/nftables) and scripting in Python and Shell
• Hands-on experience with a mainstream SIEM and writing detection rules
• Container (Docker) and Kubernetes security basics
• Network fundamentals (TCP/IP, firewalls, IPS/IDS, tcpdump / Wireshark) and MITRE ATT&CK
• Preferred: eBPF (Tetragon / Falco / Cilium / BCC), KVM/QEMU, detection-as-code, large-scale HIDS, threat hunting, bug bounty or CTF experience