Security Engineer (AI-Augmented)

About the Role

We are looking for someone who can use modern AI systems to perform various security activities throughout the Secure Development Lifecycle.

This role requires creative thinking and a can-hack mindset to try to break and find vulnerabilities in our existing systems and applications. Besides using AI to solve technical problems quickly and efficiently, the role also requires good communication and project management skills when working with our internal clients.

This role will be worked under the supervision of an experienced team leader. On the job training and guidance will be provided, you will learn how to secure a high risk company from scratch.

What You'll Do

Perform threat modeling, design review, code review and penetration testing, with the help of AI

Review findings from various in-house developed or out-of-box AI or traditional security solutions, and work with the internal stakeholders to mitigate the issues

Have deep understanding on the applications that we ship, the release schedule, people and technology stacks involved and provide timely support and feedback when needed

What We're Looking For

• Experience on building automations or integrations using AI tools
• Active security certifications (e.g., OSCP, CREST, or equivalent) would be an advantage. In today's heavily regulated industry, certifications serve as additional proof of our team's expertise.
• Have a deep understanding of application security frameworks such as OWASP Top 10 and possess a strong sense of security with regards to business and financial logic flaws.
• At least 2 years of experience in Web API testing, master BurpSuite like a professional and easily identify any dubious request or response parameters through deep technical knowledge and analytical skill.
• Proficiency in both spoken and written English. Being able to speak Mandarin will be an advantage
• Cloud platform exposure (AWS, Azure, GCP), good understanding of docker technologies such as EKS or AKS, and Web Application Firewall.