Senior Security Operations Engineer

About the role

We are looking for a proactive Senior Security Operations Engineer to protect our production environment, monitor security events, and respond to incidents. You will work closely with infrastructure, engineering, and compliance teams to strengthen our defenses and support enterprise security initiatives.

Key responsibilities

• Monitor security alerts, perform threat analysis, and respond to incidents to ensure system availability.
• Operate, maintain, and optimise security platforms such as SIEM, EDR, WAF, firewalls, NDR and bastion hosts.
• Investigate incidents through triage, root‑cause analysis, remediation and post‑incident reporting.
• Conduct vulnerability assessments and penetration testing for web, mobile, API and firmware assets.
• Identify, validate and remediate security vulnerabilities in collaboration with engineering teams.
• Stay up‑to‑date with emerging threats, threat intelligence and newly disclosed vulnerabilities.

Required profile

• Bachelor’s degree in Computer Science, Information Security or related field.
• Minimum 5 years experience in Security Operations, SOC or Penetration Testing.
• Strong analytical and problem‑solving skills with ability to work under pressure.
• Willingness to participate in on‑call and incident‑response rotations.
• Proficiency in English and Mandarin for vendor coordination.

Required skills

• Hands‑on experience with SIEM, EDR, WAF, firewalls, NDR and bastion hosts.
• Proficiency in Python for automation and security tooling.
• Use of penetration testing and vulnerability tools such as Burp Suite, Nmap, Nessus, AWVS.
• Understanding of common web application vulnerabilities (SQLi, XSS, CSRF, SSRF, RCE).
• Experience securing cloud environments (AWS, Alibaba Cloud, Tencent Cloud) is a plus.