About Tencent:
Tencent is a leading global internet and technology company dedicated to developing innovative products and services that improve the quality of life for people around the world. Founded in 1998 with its headquarters in Shenzhen, China. Our two guiding principles are to use technology for good and to provide value to our users. Our growth strategy is built upon attracting the best people and creating an amazing work atmosphere that balances the energy of a start-up with the resources of a global innovation leader.
At Tencent, we are dedicated to empowering game studios with cutting-edge infrastructure solutions. We are seeking a Sr.Infra Security Engineerwith extensive security and infrastructure experience.
Duties and Responsibilities:
As a Senior Infrastructure Security Engineer, you will play a key role in supporting internal and acquired game studios by designing and implementing reliable systems and seamless operations for game publishing. The work scope will include understanding the studios business requirements, collecting the technical requirements, developing reference architecture and prototypes based on leading industry best practices, assisting implementation and deployment globally, as well as conducting troubleshooting when necessary.
- Develop and maintain security reference architectures and prototypes for game publishing infrastructure, incorporating industry best practices for cloud, network, and application security.
- Assist game studios with the global implementation and deployment of security solutions, providing hands-on expert support and advanced troubleshooting.
- Design, implement, and manage the global Anti-DDoS strategy to protect low-latency gaming infrastructure, including real-time game servers, matchmaking services, and player APIs.
- Configure, operate, and fine-tune a multi-layered security perimeter, including Web Application Firewalls (WAF), IDS/IPS, and multi-vendor DDoS mitigation platforms (on-prem, cloud-native, and CDN).
- Create and maintain detailed incident response playbooks tailored to specific games and services, ensuring rapid and repeatable mitigation actions.
- Architect and deploy secure, resilient, and high-performance network infrastructure within multi-region cloud environments (AWS, Azure, GCP).
- Actively contribute to the estabilishment and enhancement of the SIEM platform and SOC operations by developing advanced detection rules, correlation searches, and automated response actions.
- Utilize programming skills (e.g., Python) to develop scripts and automation that streamline security operations, compliance checks, and secure infrastructure deployment.
Requirements:
- Bachelor's degree in Computer Science, Cybersecurity, Information Systems or related field.
- 8+ years of experience in cybersecurity, specializing in infrastructure security, network security and cloud security.
- Deep understanding and hands-on expertise in security technologies such as firewalls, IDS/IPS, SIEM, WAF, IAM and cloud security platforms (AWS, Azure, Google Cloud).
- Deep understanding and hands-on experience in architecting and managing network and perimeter security, including firewalls, IDS/IPS, VPNs, zero-trust network access, and DDoS protection
- Good understanding of network protocols, packet characteristics, and network attack/defense mechanisms.
- Hands-on experience in building SIEM platform and SOC operations.
- Strong analytical and problem-solving skills with experience in threat modeling, risk assessments, and security incident response.
- Proficient in programming skills with C++, C#, Python or similar languages.
- Good understanding of gaming architectures and Unreal engine is a plus
- Relevant certifications (e.g., CEH, OSCP, CREST) are a plus.
- Excellent communication and stakeholder management skills with the ability to translate technical risks into business impacts.
- Bilingual preferred (English, Chinese) to interact with stakeholders in China HQ and other regions
