Global Security Operations Engineer: API & App Defense

XIAOMI TECHNOLOGIES SINGAPORE PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Xiaomi Technologies Singapore Pte. Ltd. is seeking a senior security professional to lead and enhance its international security systems, focusing on API security and threat prevention across web and mobile apps.

You will oversee vulnerability management, implement monitoring, and ensure compliance with GDPR and PDPA, collaborating with global teams and vendors. Fluency in English and Mandarin is required.

Qualifications

• Bachelor's degree or higher in Computer Science, Information Security, or related field.
• Expertise in operating security products such as WAF and IDS.
• Proficiency in API security design and protection, including knowledge of OWASP API Top 10 and gateway security policy deployment
• Familiarity with vulnerability management tools and processes (e.g., Nessus, Burp Suite), with ability to reproduce vulnerabilities and validate remediation
• Proficiency in scripting languages like Python and Shell
• Knowledge of international data security regulations and compliance requirements
• Ability to communicate effectively in English and Mandarin to support collaboration with Mandarin-speaking stakeholders, regional customers, engineering teams, and colleagues based in China.

Responsibilities

• Manage full lifecycle of security solutions (WAF, MiShield, HIDS) to protect web and mobile apps.
• Develop real-time monitoring/alerting to analyze logs and detect attacks.
• Design and implement API security framework for international operations.
• Integrate API security with gateways and microservices; promote shift-left security.
• Oversee vulnerability management including scanning, risk assessment, remediation.
• Monitor global threat intel and coordinate red/blue team exercises.
• Ensure compliance with GDPR and Singapore PDPA; prepare audit reports.
• Collaborate with international units, local compliance, and vendors for security support.

Skills

WAF expertise

IDS expertise

API security design

Python

Shell scripting

English Mandarin communication

Vulnerability management

Security automation tools

Education

Bachelor's degree in Computer Science or Information Security

Tools

Nessus

Burp Suite

SAST/DAST tools

Job description

Xiaomi Technologies Singapore Pte. Ltd. is seeking a senior security professional to lead and enhance its international security systems, focusing on API security and threat prevention across web and mobile apps.

You will oversee vulnerability management, implement monitoring, and ensure compliance with GDPR and PDPA, collaborating with global teams and vendors. Fluency in English and Mandarin is required.