We are seeking a Senior Security Engineer to join our growing security team. As we continue building AI-powered services that deliver tremendous value to our customers worldwide, and given the rapid pace of our business growth, we are looking for experienced and capable talent to strengthen cybersecurity across all stages of product development and to collaborate closely with our software engineering teams. You will also play a key role in driving information security initiatives and integration efforts across the group, including addressing the emerging risks introduced by rapid advancements in AI technologies.
Responsibilities
- Design, implement, and maintain secure CI/CD pipelines with automated security controls (SAST, DAST, SCA, secrets scanning, and IaC scanning) integrated into development workflows
- Establish and drive the Secure Software Development Lifecycle (SSDLC), ensuring security is embedded at every stage — from design and threat modeling through deployment and runtime
- Define and standardize security requirements analysis and threat modeling practices to identify risks during the design phase
- Develop Policy as Code solutions to enable automated compliance and governance checks
- Conduct pre-production security assessments, vulnerability assessments, and penetration testing
- Implement security best practices for Infrastructure as Code (IaC) and cloud-native environments
- Build and maintain security monitoring, log aggregation, and alerting systems to support detection and response
- Create security deployment checklists and continuously improve production environment security posture
- Assess and mitigate emerging risks introduced by AI technologies, including risks related to LLM applications, AI agents, prompt injection, data leakage through AI tools, model supply chain, and AI-assisted development workflows
- Partner with engineering teams to evaluate, adopt, and govern AI-powered development tools (e.g., AI coding assistants, AI agents) in a secure and compliant manner
About you
Minimum
- Minimum 4 years of experience in cybersecurity, DevSecOps, or software development
- Solid understanding of the Secure Software Development Lifecycle (SSDLC) and modern application security practices
- Hands-on experience in software product engineering, deployment, and system integration
- Practical experience leveraging AI automation or AI agents in day-to-day work (e.g., Claude Code, Cursor, GitHub Copilot, Claude/ChatGPT, or custom AI agent workflows for security operations, code review, or automation)
- Ability to evaluate product performance metrics, diagnose issues, and drive resolution
- Ability to stay current with advancements in technical product development and the evolving AI/security landscape
- Strong communication and interpersonal skills, with the ability to collaborate effectively across engineering and business teams
Preferred
- BS/MS in Computer Science or a related field
- Relevant security certifications (CISSP, CCSP, SSCP, CSSLP, CC, CISM, CEH, etc.)
- Experience with compliance frameworks such as ISO 27001 or SOC 2
- Blue team experience, including SOC operations or threat hunting
- Experience participating in red-blue team exercises or CTF competitions
- Experience designing and implementing SSDLC processes from the ground up
- Familiarity with AI security frameworks (e.g., OWASP Top 10 for LLM Applications, MITRE ATLAS, NIST AI RMF) and securing AI/ML pipelines
#LI-TC1