Junior Global API Security Engineer

Xiaomi; Singapore; On-site; SGD 180,000 - 260,000; Full time

Job summary

Xiaomi, based in Singapore, seeks an experienced security leader to manage international security systems and drive API security framework development for global apps. You will oversee vulnerability management, threat monitoring, and compliance with GDPR and PDPA, coordinating with R&D and regional teams to strengthen defenses.

The role requires strong scripting skills, experience with WAF and IDS, and fluency in English and Mandarin to collaborate with stakeholders across China and other

Qualifications

• Bachelor’s degree or higher in Computer Science, Information Security, or related field.
• Expertise with WAF and IDS security products.
• Proficiency in API security design, OWASP API Top 10, and gateway policy deployment.
• Familiarity with vulnerability management tools (Nessus, Burp Suite) and remediation.
• Proficiency in Python and Shell scripting.
• Knowledge of international data security regulations and compliance.
• Ability to communicate in English and Mandarin with stakeholders and teams.

Responsibilities

• Oversee full lifecycle of core security solutions for Xiaomi's international operations.
• Develop real-time monitoring and alerting frameworks; analyze logs and detect attacks.
• Design and implement an API security framework for international operations.
• Integrate API security with gateways and microservices; promote shift-left security.
• Oversee vulnerability management, risk assessment, and remediation.
• Monitor global threat intelligence; organize red/blue team exercises.
• Ensure compliance with GDPR and Singapore PDPA; prepare audit reports.
• Collaborate with regional units and vendors to provide security support and training.

Skills

Security architecture

Threat monitoring

Vulnerability management

API security

Scripting

Communication

Education

Bachelor’s degree in CS/InfoSec

Tools

WAF

IDS

Nessus

Burp Suite

SAST/DAST

Job description

Xiaomi, based in Singapore, seeks an experienced security leader to manage international security systems and drive API security framework development for global apps. You will oversee vulnerability management, threat monitoring, and compliance with GDPR and PDPA, coordinating with R&D and regional teams to strengthen defenses.

The role requires strong scripting skills, experience with WAF and IDS, and fluency in English and Mandarin to collaborate with stakeholders across China and other