Xiaomi Technology

职位描述：
<ol>
<li>Security Protection System Operations</li>
</ol>
<ul>
<li>Manage the end-to-end lifecycle of core security solutions (including WAF, MiShield, HIDS) for Xiaomi’s international business portfolio, including configuring policies, optimizing rules, and expanding coverage to protect web/mobile applications against common threats (e.g., OWASP Top 10).
</li>
<li>Develop real-time monitoring/alerting frameworks, analyze security logs to detect anomalous traffic and attack activities, produce root-cause analysis reports, and enhance defense strategies.
</li>
</ul>
<ol start="2">
<li>API Security Capability Development</li>
</ol>
<ul>
<li>Lead the design of an API security framework for international operations, ensuring end-to-end interface protection. Create models for abnormal behavior detection and access control policies to mitigate risks like unauthorized data access and API abuse.
</li>
<li>Integrate with API gateways/microservices, incorporate SAST/DAST tools to advance shift-left security practices, and establish developer security guidelines.
</li>
</ul>
<ol start="3">
<li>Vulnerability Management</li>
</ol>
<ul>
<li>Oversee end-to-end vulnerability processes (scanning, risk assessment, remediation) for international business. Implement high-risk vulnerability response mechanisms and collaborate with R&amp;D teams on code-level fixes.
</li>
<li>Monitor global threat intelligence and zero-day vulnerabilities, organize regular red/blue team exercises, and refine emergency response protocols.
</li>
</ul>
<ol start="4">
<li>Compliance and Collaboration Support</li>
</ol>
<ul>
<li>Ensure security operations adhere to regional regulatory standards, including GDPR and Singapore Personal Data Protection Act (PDPA), and prepare compliance audit reports.
</li>
<li>Collaborate with international business units, local compliance teams, and third-party vendors to deliver security technical support and training.
</li>
</ul>
职位要求：
<ol>
<li>Education and Experience</li>
</ol>
<ul>
<li>Bachelor’s degree or higher in Computer Science, Information Security, or a related field.</li>
</ul>
<ol start="2">
<li>Technical Skills</li>
</ol>
<ul>
<li>Expertise in operating security products (e.g., WAF, IDS).
</li>
<li>Proficiency in API security design/protection, including OWASP API Top 10 knowledge and gateway security policy deployment.
</li>
<li>Familiarity with vulnerability management processes and tools (e.g., Nessus, Burp Suite), along with the ability to reproduce vulnerabilities and validate remediation efforts.
</li>
<li>Proficiency in scripting languages like Python/Shell; experience in developing security automation tools is an advantage.
</li>
</ul>
<ol start="3">
<li>Core Competencies</li>
</ol>
<ul>
<li>Knowledge of international data security regulations and compliance requirements, with effective cross-regional team collaboration skills.
</li>
<li>Fluency in English and Mandarin (spoken and written) for daily work; professional certifications such as CISSP or CSSLP are preferred.
</li>
<li>Strong sense of responsibility and problem-solving abilities, with the capacity to respond to unexpected security incidents.
</li>
</ul>

Information Security Engineer (Security Operations)(A03596)

Information Security Engineer (Security Operations)(A03596)

This job is no longer available

Talents

Recruiters

About