Information Technology Security Engineer

About the role

This position focuses on third-party application and supply chain security, identity and access governance, and secure enterprise IT operations. It covers vendor and SaaS software security, access approvals, identity integration, and support for employees and infrastructure.

Key responsibilities

• Maintain an inventory of third-party software, SaaS applications and vendors, conduct security assessments and risk classification, and follow up on remediation and periodic reviews.
• Manage access approvals for third-party applications and integrations, including least-privilege permissions, authorization expiry, access reviews and offboarding.
• Review and harden application and cloud security configurations, track vulnerabilities and alerts, and take part in responding to vendor and application security incidents.
• Integrate enterprise applications with a centralized identity platform, implementing SSO, MFA, account lifecycle management and zero trust access controls.
• Manage OAuth application permissions, API keys and service accounts, including credential rotation, auditing and timely access revocation.
• Help employees configure and use third-party software securely and resolve account, permission and access issues.
• Support office network and VPN troubleshooting, maintain configuration backups and handover documentation, and use AI tools and automation to improve efficiency.

Required profile

• Bachelor's degree or above in Computer Science, Information Security or a related field, with at least 5 years of relevant IT or security experience.
• Hands-on experience in supply chain or third-party software security, such as vendor assessments, SaaS security governance or third-party access controls, with the ability to drive remediation.
• Strong English and Chinese communication skills, able to coordinate with business, engineering, procurement and vendor teams.

Required skills

• Familiarity with SSO, MFA, SAML/OIDC and account lifecycle management; understanding of OAuth, API keys and service account risks.
• Practical network troubleshooting skills covering Wi-Fi, DNS, VPN, firewalls and access control; familiarity with cloud IAM and audit logs.
• AI-assisted coding and productivity skills preferred; experience with SBOM, SCA, CI/CD security or ZTNA is a plus.