Senior Infrastructure Security Engineer - Information Security

The Engineering and Technology team is at the core of the Shopee platform development. The team is made up of a group of passionate engineers from all over the world, striving to build the best systems with the most suitable technologies. Our engineers do not merely solve problems at hand; We build foundations for a long-lasting future. We don't limit ourselves on what we can or can't do; we take matters into our own hands even if it means drilling down to the bottom layer of the computing platform. Shopee's hyper-growing business scale has transformed most "innocent" problems into huge technical challenges, and there is no better place to experience it first-hand if you love technologies as much as we do.

About the Team:

We are looking for a senior security engineer to support security governance projects and optimise security tool operations. This role requires a strong technical foundation in security engineering, risk management, and automation, along with the ability to drive security initiatives, improve workflows, and collaborate across teams.

You will be responsible for managing security risks, ensuring operational resilience, and maintaining high availability of security tools and monitoring systems. This role involves not only hands-on security engineering but also enhancing security processes, driving efficiency, and improving overall visibility into security risks.

Job Description:

• Drive security risk governance projects by identifying vulnerabilities, prioritizing remediation efforts, and working with teams to implement security controls effectively.
• Conduct deep technical assessments of network architecture, infrastructure operations, and internal core systems to proactively mitigate security risks.
• Develop and implement automated security monitoring, alerting, and response mechanisms to improve operational efficiency.
• Streamline security workflows, incident response processes, and reporting mechanisms, ensuring timely risk visibility and mitigation.
• Work closely with Engineering, Infrastructure, and DevOps teams to integrate security best practices into system design, ensuring reliability, scalability, and security.

Requirements:

• Over 5 years of experience in cybersecurity, security governance, security tool operations, or security infrastructure-related fields.
• At least 2 year of hands-on experience with security tools and platforms such as SIEM (Splunk, ELK), IDS/IPS, EDR, forensic tools, and log analysis platforms.
• At least 1 year of experience in security automation and scripting (Python, Bash or similar) to improve monitoring, alerting and security operations efficiency.
• Proficiency in security automation and scripting (Python, Bash, or similar) to improve monitoring, alerting, and security operations efficiency.
• In-depth knowledge of infrastructure security, vulnerability management, and system hardening across on-premise and cloud environments.
• Familiarity with secure configurations, logging pipelines, and monitoring architectures to ensure resilience and high availability.
• Experience working with large-scale distributed systems, cloud security models (AWS, GCP, or Azure), and container security.
• Strong analytical and problem-solving skills, with the ability to manage multiple security initiatives while balancing operational demands.
• Excellent project management, documentation, and communication skills, ensuring alignment with cross-functional teams and leadership.
• Ability to translate complex security risks into actionable insights for both technical and non-technical stakeholders.