Global Information Security Engineer - App & API Protection

Xiaomi Technology; Singapore; On-site; SGD 120,000 - 160,000; Full time

Job summary

Xiaomi Technology in Singapore seeks a senior security engineer to lead protection of web and mobile applications for its international portfolio. You will manage core security solutions (WAF, HIDS), build real-time monitoring, and drive vulnerability management across regions.

You will design an API security framework, integrate with gateways, enforce shift-left security, and collaborate with R&D and compliance teams to meet GDPR and PDPA requirements.

Qualifications

• Bachelor’s degree or higher in Computer Science, Information Security, or a related field.

Responsibilities

• Manage end-to-end lifecycle of core security solutions (WAF, MiShield, HIDS) for Xiaomi’s international portfolio.
• Develop real-time monitoring/alerting frameworks and analyze security logs to detect anomalous traffic and attacks.
• Lead the design of an API security framework and enforce access control to mitigate API abuse.
• Oversee end-to-end vulnerability processes (scanning, risk assessment, remediation) and coordinate with R&D for code-level fixes.
• Ensure security operations comply with GDPR and PDPA; collaborate with regional units and vendors to deliver security support.

Skills

WAF

IDS

API security

OWASP Top 10

Nessus

Burp Suite

Python

Shell scripting

Automation tools

English

Mandarin

Education

Bachelor’s degree in CS/InfoSec

Tools

Nessus

Burp Suite

Job description

Xiaomi Technology in Singapore seeks a senior security engineer to lead protection of web and mobile applications for its international portfolio. You will manage core security solutions (WAF, HIDS), build real-time monitoring, and drive vulnerability management across regions.

You will design an API security framework, integrate with gateways, enforce shift-left security, and collaborate with R&D and compliance teams to meet GDPR and PDPA requirements.