Senior Security Operation Center (SOC) Engineer - Information Security

at  Shopee

APPLY NOW

Department Engineering and Technology
LevelExperienced (Individual Contributor)
LocationSingapore
The Engineering and Technology team is at the core of the Shopee platform development. The team is made up of a group of passionate engineers from all over the world, striving to build the best systems with the most suitable technologies. Our engineers do not merely solve problems at hand; We build foundations for a long-lasting future. We don’t limit ourselves on what we can or can’t do; we take matters into our own hands even if it means drilling down to the bottom layer of the computing platform. Shopee’s hyper-growing business scale has transformed most “innocent” problems into huge technical challenges, and there is no better place to experience it first-hand if you love technologies as much as we do.

JOB DESCRIPTION:

• Conduct risk assessment of the infrastructure to help identify security risks, and determine appropriate controls to mitigate risks.
• Monitor and manage security incident response activities and detection alerts, and remediate security vulnerabilities. This includes conducting in-depth root cause analysis by identifying and investigating issues, collaborating with other teams to assess their impact on the business, and implementing appropriate remediation and mitigation measures.
• Develop and implement initiatives that enhance the information security team to effectively address and mitigate security incidents.
• Continuously improve the internal security detection system by actively analyzing internal incidents and threat intelligence data.
• Provide comprehensive support for special security or regulatory driven projects throughout the lifecycle.

REQUIREMENTS:

• Bachelor’s degree or higher in Computer Science, Information Technology, Programming & Systems Analysis, Engineering, or other related fields
• Minimum 3 years of work experience in roles related to security operations, incident response, or malware
• Experience with and the ability to autonomously lead incident investigations
• Extensive expertise in the analysis of event and system logs, conducting packet and forensic analysis to support intrusion investigations
• Proficient knowledge of security best practices and key security technologies such as SIEM, IDS, etc
• Experience with Linux and Windows administration, including system authentication, patch deployment, system configuration and security controls
• Hands-on experience with security automation, including the creation and execution of alert response runbooks will be advantageous
• Proficient in scripting languages such as Python, PowerShell scripts, and bash for various security-related tasks is a plus
• Experience with regulatory compliance is a plus

Please refer the Job description for details