Back to jobs
Cybersecurity Engineer (Security operations)Xiaomi Technology · Singapore, Singapore
Xiaomi Technology logo

Xiaomi Technology

company page ↗

Cybersecurity Engineer (Security operations)

🗓️ Posted 2026-08-31 Singapore, Singapore Full-time Hybrid ICT
💰 Salary Not shared 📊 Market S$6,000–S$10,000/mo

About the Company

Xiaomi Corporation was founded in April 2010 and listed on the Main Board of the Hong Kong Stock Exchange on July 9, 2018 (1810.HK). Xiaomi is a consumer electronics and smart manufacturing company with smartphones and smart hardware connected by an IoT platform at its core. Embracing our vision of "Make friends with users and be the coolest company in the users' hearts", Xiaomi continuously pursues innovations, high-quality user experience and operational efficiency. The company relentlessly builds amazing products with honest prices to let everyone in the world enjoy a better life through innovative technology. Xiaomi is one of the world's leading smartphone companies. In December 2025, global monthly active users ( "MAU") reached 754.1 million. The company has also established the world's leading consumer AIoT (AI+IoT) platform, reached 1079.2 million smart devices connected to its platform (excluding smartphones, laptops and tablets) as of December 31, 2025. Xiaomi products are present in more than 100 countries and regions around the world. In July 2025, Xiaomi was included in the Fortune Global 500 list for the seventh year in a row. Xiaomi is a constituent of the Hang Seng Index, Hang Seng China Enterprises Index, Hang Seng TECH Index and Hang Seng China 50 Index. Software Development

Responsibilities

  • ● Job Responsibilities
  • ● Security Protection System Operations
  • ● Manage the end-to-end lifecycle of core security solutions (including WAF, MiShield, HIDS) for Xiaomi's international business portfolio, including configuring policies, optimizing rules, and expanding coverage to protect web/mobile applications against common threats (e.g., OWASP Top 10).
  • ● Develop real-time monitoring/alerting frameworks, analyze security logs to detect anomalous traffic and attack activities, produce root-cause analysis reports, and enhance defense strategies.
  • ● API Security Capability Development
  • ● Lead the design of an API security framework for international operations, ensuring end-to-end interface protection. Create models for abnormal behavior detection and access control policies to mitigate risks like unauthorized data access and API abuse.
  • ● Integrate with API gateways/microservices, incorporate SAST/DAST tools to advance shift-left security practices, and establish developer security guidelines.
  • ● Vulnerability Management
  • ● Oversee end-to-end vulnerability processes (scanning, risk assessment, remediation) for international business. Implement high-risk vulnerability response mechanisms and collaborate with R&D teams on code-level fixes.
  • ● Monitor global threat intelligence and zero-day vulnerabilities, organize regular red/blue team exercises, and refine emergency response protocols.
  • ● Compliance and Collaboration Support
  • ● Ensure security operations adhere to regional regulatory standards, including GDPR and Singapore Personal Data Protection Act (PDPA), and prepare compliance audit reports.
  • ● Collaborate with international business units, local compliance teams, and third-party vendors to deliver security technical support and training.
  • ● Job Requirements
  • ● Bachelor's degree or higher in Computer Science, Information Security, or a related field.
  • ● Technical Skills
  • ● Expertise in operating security products (e.g., WAF, IDS).
  • ● Proficiency in API security design/protection, including OWASP API Top 10 knowledge and gateway security policy deployment.
  • ● Familiarity with vulnerability management processes and tools (e.g., Nessus, Burp Suite), along with the ability to reproduce vulnerabilities and validate remediation efforts.
  • ● Proficiency in scripting languages like Python/Shell; experience in developing security automation tools is an advantage.