Staff Product Security Engineer

Airwallex; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Airwallex in Singapore is seeking a senior security engineer to scale secure infrastructure and applications. You will build controls, design improvements, and develop robust incident response workflows.

The ideal candidate has 8+ years in security engineering or incident response, deep cloud experience, CI/CD tooling, and the ability to explain complex security concepts to non-technical teams in a fast-growing startup.

Qualifications

• 8+ years security engineering or incident response experience in tech.
• In-depth expertise with at least one major cloud platform.
• Strong knowledge of CI/CD tooling, pipelines, and software development tools.
• Comprehensive understanding of attacker tools, detection methods, and incident response.
• Ability to explain technical security concepts to non-technical audiences.

Responsibilities

• Build security controls enabling secure scaling across infrastructure and applications
• Design and deliver security improvements spanning applications, software, and services
• Develop detection strategies and incident response workflows to accelerate response times
• Create secure systems through integration, testing, operations, and maintenance practices
• Analyze endpoint, network, and cloud telemetry to identify and mitigate threats
• Design and maintain cybersecurity infrastructure improving resilience across the environment
• Investigate, contain, and respond to cybersecurity incidents reducing organizational risk
• Identify vulnerabilities, configuration issues, and remediation opportunities in systems
• Collect and analyze threat intelligence and forensic evidence to disrupt threats
• Conduct defensive operations, tactical forensics, and threat hunting activities
• Embed security into new and existing applications driving continuous improvement

Skills

Security engineering

Incident response

Cloud platforms

CI/CD tooling

Threat detection

Communication

Education

Bachelor's degree in Cybersecurity/CS

Tools

Splunk

Kubernetes

Okta

GCP

Alibaba Cloud

Job description

What you'd do:

• Build security controls enabling secure scaling across infrastructure and applications
• Design and deliver security improvements spanning applications, software, and services
• Develop detection strategies and incident response workflows to accelerate response times
• Create secure systems through integration, testing, operations, and maintenance practices
• Analyze endpoint, network, and cloud telemetry to identify and mitigate threats
• Design and maintain cybersecurity infrastructure improving resilience across the environment
• Investigate, contain, and respond to cybersecurity incidents reducing organizational risk
• Identify vulnerabilities, configuration issues, and remediation opportunities in systems
• Collect and analyze threat intelligence and forensic evidence to disrupt threats
• Conduct defensive operations, tactical forensics, and threat hunting activities
• Embed security into new and existing applications driving continuous improvement

What they want:

• 8+ years security engineering or incident response experience in tech
• In-depth expertise with at least one major cloud platform
• Strong knowledge of CI/CD tooling, pipelines, and software development tools
• Comprehensive understanding of attacker tools, detection methods, and incident response
• Ability to explain technical security concepts to non-technical audiences
• Passion for solving complex challenges of high-growth startup environments
• Self-motivated with drive to learn new or deepen existing skills

Nice to have:

• Bachelor's degree in Cybersecurity, Computer Science, or related field
• Recognized cybersecurity certifications such as OSCP, GIAC, or CEH
• Strong experience with Splunk and other security monitoring tools
• Experience with DevOps or SRE practices using Kubernetes
• Experience with Google Cloud Platform or Alibaba Cloud
• Experience with Okta, GSuite, and cloud-based VPN solutions
• Programming proficiency in Python, Java, Kotlin, or similar languages
• Published articles, journals, or blogs on cybersecurity topics 8+ years security engineering or incident response experience in tech
• In-depth expertise with at least one major cloud platform
• Strong knowledge of CI/CD tooling, pipelines, and software development tools
• Comprehensive understanding of attacker tools, detection methods, and incident response
• Ability to explain technical security concepts to non-technical audiences
• Passion for solving complex challenges of high-growth startup environments
• Self-motivated with drive to learn new or deepen existing skills