Responsibilities
We are the Global e-Commerce Security BP team. We partner closely with product, engineering and operations to safeguard Global e-Commerce across regions. Our scope covers application security, data security and architecture security. We build and operate the SDL/DevSecOps security program, conduct threat modeling, code reviews, penetration testing, red/blue exercises and vulnerability management, respond to security incidents rapidly and drive systemic fixes. We value pragmatism, ownership and cross-team collaboration, protecting business growth and user trust at global scale. Responsibilities: - Conduct vulnerability discovery and risk management for Global e-Commerce business-related applications and APP products, and provide security assurance and support for key projects. - Participate in the construction and optimization of the SDL security system and processes, proactively mitigate potential security risks during the design and development phase, and systematically address security risks from the architectural level. - Responsible for building security-related capabilities and processes, including security assessment, code auditing, penetration testing, vulnerability discovery, and attack and defense drills, and working closely with the product development team to improve the business's security level. - Track domestic and international security trends and vulnerabilities, respond quickly to security incidents, propose solutions and technical analysis, and coordinate with multiple departments to handle them.
Qualifications
Minimum Qualifications - Solid understanding of common Web/App/System vulnerabilities and remediation. - Strong white-box auditing skills able to review Python/Go/Node.js/Java capable of automating repetitive tasks. - Experience participating in SL/DevSecOps security practices (policies, controls, scanning tools) and collaborating with product and engineering teams. - Fast learning and analytical problem-solving skills keeps up with the latest security trends. - Excellent communication, collaboration and professional ethics. Preferred Qualifications - Experience building or optimizing SL/DevSecOps security programs at scale. - Deep expertise in one or more areas: application security, data security, privacy compliance, architecture security. - Experience with red/blue exercises, incident response and cross-regional security operations.
