About The Team
The Information Security team protects Shopee's infrastructure and data across on-premises, cloud, and hybrid environments. It continuously and proactively identifies security risks across infrastructure operations, network architecture, and critical core systems from both defensive and offensive perspectives. The team designs practical security mechanisms, policies, and standards to drive governance initiatives that improve the organization's overall security posture.
Job Description
- Participate in the design and implementation of the company's infrastructure security architecture, continuously enhancing the defense-in-depth security framework.
- Design and drive security solutions for complex environments, including traditional on-premises production environments, public cloud, private cloud, and hybrid cloud infrastructures.
- Lead security initiatives to identify information security risks throughout the product lifecycle, including product design, system development, and day-to-day operations. Propose practical remediation plans based on industry best practices, regulatory requirements, and security standards, and drive their successful implementation.
Requirements
- Bachelor's degree or above in Information Security, Computer Science, or a related field.
- At least 3 years of experience doing Security Engineer role.
- Solid understanding of common threat scenarios faced by Internet-based companies, with hands-on experience in enterprise information security programs.
- Familiarity with the operations and software development practices of large-scale Internet companies, including common security risks and appropriate security controls.
- Experience building large-scale security infrastructure or delivering enterprise-scale security projects.
- Strong project management and execution skills, with the ability to manage complex initiatives and effectively balance implementation quality, cost, timelines, and milestone delivery.
