Senior Infrastructure Security Engineer - Information Security

SHOPEE SINGAPORE PRIVATE LIMITED; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Shopee Singapore Private Limited is seeking a Security Engineer to join the Information Security team. You will design and implement security controls across on-premises, cloud, and hybrid environments, contributing to a defense-in-depth strategy.

You will lead security initiatives across the product lifecycle, assess risks, and implement remediation plans in line with industry best practices and regulatory requirements. Strong collaboration with engineering and operations is essential.

Qualifications

• Bachelor's degree in information security, CS or related field.
• At least 3 years of experience as a Security Engineer.
• Strong understanding of common threat scenarios for Internet companies.
• Experience with large-scale Internet security programs and controls.
• Experience building and deploying large security infrastructure.
• Strong project management and execution skills.

Responsibilities

• Participate in the design and implementation of the security architecture across infra.
• Lead security initiatives to identify risks throughout the product lifecycle and drive remediation.
• Propose and implement practical security controls aligned with best practices and regulatory requirements.

Skills

Security engineering

Threat modeling

Project management

Security controls design

Incident response

Education

Bachelor's degree or above in Information Security, Computer Science, or a related field

Job description

The Engineering and Technology team is at the core of the Shopee platform development. The team is made up of a group of passionate engineers from all over the world, striving to build the best systems with the most suitable technologies. Our engineers do not merely solve problems at hand; We build foundations for a long-lasting future. We don't limit ourselves on what we can or can't do; we take matters into our own hands even if it means drilling down to the bottom layer of the computing platform. Shopee's hyper-growing business scale has transformed most "innocent" problems into huge technical challenges, and there is no better place to experience it first-hand if you love technologies as much as we do.

About the Team

The Information Security team protects Shopee’s infrastructure and data across on-premises, cloud, and hybrid environments. It continuously and proactively identifies security risks across infrastructure operations, network architecture, and critical core systems from both defensive and offensive perspectives. The team designs practical security mechanisms, policies, and standards to drive governance initiatives that improve the organization’s overall security posture.

Job Description

• Participate in the design and implementation of the company's infrastructure security architecture, continuously enhancing the defense-in-depth security framework.
• Design and drive security solutions for complex environments, including traditional on-premises production environments, public cloud, private cloud, and hybrid cloud infrastructures.
• Lead security initiatives to identify information security risks throughout the product lifecycle, including product design, system development, and day-to-day operations. Propose practical remediation plans based on industry best practices, regulatory requirements, and security standards, and drive their successful implementation.

Requirements

• Bachelor's degree or above in Information Security, Computer Science, or a related field.
• At least 3 years of experience doing Security Engineer role.
• Solid understanding of common threat scenarios faced by Internet-based companies, with hands-on experience in enterprise information security programs.
• Familiarity with the operations and software development practices of large-scale Internet companies, including common security risks and appropriate security controls.
• Experience building large-scale security infrastructure or delivering enterprise-scale security projects.
• Strong project management and execution skills, with the ability to manage complex initiatives and effectively balance implementation quality, cost, timelines, and milestone delivery.