Global Security Engineer - API & Compliance Ops

Xiaomi Technology; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

Xiaomi Technology seeks a security operations professional to manage end-to-end security solutions, monitor for threats, and drive API security across international operations. You will lead vulnerability management, collaborate with R&D for fixes, and ensure compliance with regional data protection standards.

The role requires experience with WAF/IDS, API security, and automation tooling, and emphasizes cross-regional collaboration and Mandarin/English proficiency. Singapore-based, on-site work.

Qualifications

• Bachelor's degree or higher in Computer Science, Information Security, or related field.
• Minimum 3 years of experience in information security operations; international business security experience is preferred.

Responsibilities

• Manage end-to-end lifecycle of core security solutions (WAF, MiShield, HIDS) for Xiaomi's international portfolio; configure policies, optimize rules, and expand coverage against threats.
• Develop real-time monitoring/alerting frameworks; analyze security logs to detect anomalies and produce root-cause analyses.
• Lead API security framework design for international operations; implement abnormal behavior detection and access control policies; integrate with gateways/microservices and enforce security guidelines.
• Oversee vulnerability processes (scanning, risk assessment, remediation) for international business; perform red/blue exercises and coordinate with R&D for fixes.
• Ensure security operations comply with GDPR and PDPA; collaborate with cross-regional teams and third-party vendors for security support and training.

Skills

WAF

IDS

API security design

Vulnerability management

Python/Shell scripting

Security automation tools

Education

Bachelor's degree in Computer Science / Information Security

Tools

Nessus

Burp Suite

API gateways

Job description

Xiaomi Technology seeks a security operations professional to manage end-to-end security solutions, monitor for threats, and drive API security across international operations. You will lead vulnerability management, collaborate with R&D for fixes, and ensure compliance with regional data protection standards.

The role requires experience with WAF/IDS, API security, and automation tooling, and emphasizes cross-regional collaboration and Mandarin/English proficiency. Singapore-based, on-site work.