Cybersecurity Engineer (Security Operations)

About the role

The Cybersecurity Engineer will lead security operations for Xiaomi’s international portfolio, protecting web and mobile applications and ensuring compliance with global data regulations.

Key responsibilities

• Operate and optimise core security solutions such as WAF, MiShield and HIDS, configuring policies and expanding coverage against OWASP Top 10 threats.
• Develop real‑time monitoring and alerting frameworks, analyse security logs, and produce root‑cause analysis reports to strengthen defence strategies.
• Design and implement an API security framework, including abnormal‑behavior models, access‑control policies, and integration with API gateways and micro‑services.
• Lead vulnerability management processes—scanning, risk assessment, remediation—and coordinate high‑risk response with R&D teams.
• Monitor global threat intelligence, organise red/blue‑team exercises and refine emergency response procedures.
• Ensure compliance with GDPR, Singapore PDPA and other regional regulations, preparing audit reports and delivering technical training to stakeholders.

Required profile

• Bachelor’s degree or higher in Computer Science, Information Security or a related field.
• Fluency in English and Mandarin (spoken and written).
• Professional certifications such as CISSP or CSSLP are preferred.
• Strong sense of responsibility, problem‑solving ability and capacity to respond to unexpected security incidents.

Required skills

• Experience with Web Application Firewalls (WAF) and Intrusion Detection/Prevention Systems (IDS/HIDS).
• API security design, OWASP API Top 10 knowledge and gateway policy deployment.
• Vulnerability management tools such as Nessus and Burp Suite.
• Proficiency in Python and Shell scripting for security automation.
• Familiarity with SAST and DAST tools and shift‑left security practices.