Research and Develop Algorithms: Identify various fraud orders in e-commerce search and recommendation, design and develop effective risk control strategies and models to guarantee user experience and seller benefit.
Model Optimisation: Explore, innovate, and optimise risk control models to improve precision, recall, and scalability.
Data Analysis: Conduct in-depth analysis of business data, user behaviour data, and seller/item information, leveraging various anomaly detection methods for modelling.
Business and Algorithm Integration: Align risk control strategies with advertising business objectives, establish a robust anomaly monitoring system, and quickly detect and address risks.
Industry Trends Monitoring: Stay updated on the latest trends in risk control and anomaly detection technologies, exploring innovative algorithms.
Perform security assessments and penetration testing on Shopee's web applications, APIs and internal systems; find real, exploitable issues and drive them to closure with engineering teams.
Review code and architecture designs to catch security flaws before they ship, and help embed security requirements into new business and technology initiatives.
Build and improve the security automation and tooling that scales the team's coverage beyond manual review: in-house AI agents for security workflows, as well as SAST, DAST and SCA capabilities integrated into the development pipeline.
Assess the security of AI-powered features and internal AI tooling — prompt injection, unsafe tool/agent invocation, data leakage and over-permissive integrations.
Support vulnerability response and incident investigation; track industry trends and bring what you learn back into our defences.
Design and develop code based on business requirements
Support data calculation needs for intelligent risk decisions. Delivering high-quality and efficient data computing platforms and products
Participate in offline and real-time data development to support risk analysis, model training, and other risk-related data needs
Write clean, efficient, and maintainable code
Participate in the design and development of security platforms and surrounding infrastructure such as risk decision rule engine and feature store.
Design and write high-quality system and business code to meet user demands for platform capabilities.
Design and implement tools to help improve system stability and efficiency.
Stay updated with industry trends and continuously improve the platform's capabilities.
Monitor and analyze security related alerts through the various platforms. Conduct timely investigation of alerts, perform analysis and event triage.
Leverage security research, security assessment, operations, and incident response to ensure security across different products and systems.
Stay updated with industry trends and continuously improve the security of the company.
Lead the architecture design and core capability development of the Business Security Platform, leveraging AI / LLM technologies to build end-to-end workflows for automated risk discovery, intelligent analysis, solution recommendation, and closed-loop risk governance.
Design and implement high-performance, highly available, and scalable platform services to support key scenarios such as anti-fraud, anti-scam, payment, and account security.
Build data computing and data service capabilities for risk decisioning, delivering high-quality, efficient, and reusable data computing products.
Research, evaluate, and apply industry best practices in AI Agents, LLM application engineering, and anti-fraud system engineering to drive technology adoption in business security scenarios.
Collaborate closely with product, algorithm, strategy, data, and platform teams to ensure smooth integration, continuous evolution, and scalable adoption of anti-fraud systems.
As a senior technical expert, lead critical technical reviews, solve complex engineering challenges, and improve engineering quality, technical standards, and talent development within the team.
Responsible for the architecture design and core capability building of the business security platform, leveraging AI/LLM technologies to create end-to-end capabilities such as automatic risk discovery, intelligent analysis, solution recommendation, and closed-loop governance.
Design and implement high-performance, highly available, and scalable platform services to support key business scenarios such as anti-fraud, payment, and account security.
Build data computing and data service capabilities for risk control decision-making, delivering high-quality, efficient, and reusable data computing products.
Track and evaluate industry best practices in areas such as AI Agent, LLM application engineering, and anti-fraud system engineering, promoting the implementation of new technologies in business security scenarios.
Collaborate closely with product, algorithm, strategy, data, and platform teams to promote the smooth integration, continuous evolution, and large-scale application of the anti-fraud system.
As a senior technical expert, responsible for reviewing key technical solutions, tackling complex problems, and promoting the improvement of team engineering quality, technical specifications, and talent development.
Monitor and analyze security related alerts through the various platforms. Conduct timely investigation of alerts, perform analysis and event triage.
Leverage security research, security assessment, operations, and incident response to ensure security across different products and systems.
Stay updated with industry trends and continuously improve the security of the company.
Design and implement high-performance, highly stable platform services
Support data calculation needs for intelligent risk decision. Delivering high-quality and efficient data computing products
Participate in offline and real-time data development to support risk analysis, model training, and other risk-related data needs
Research, evaluate, and apply industry best practices and new technologies in anti-fraud system engineering
Collaborate closely with product, algorithm/strategy, and platform teams to ensure smooth integration and evolution of the anti-fraud system.
Monitor and analyse security alerts through the SIEM platform.
Conduct investigation of alerts, perform analysis and correlation of events from various sources.
Collaborate with teams across functions to ensure prompt and efficient alert investigation and incident response.
Follow established policies and procedures to escalate security incidents.
Keep precise records of incident response activities.
Drive a continuous effort to improve the SOC process.
Participate in the distributed 24x7 operations and on-call duties.
Support the IT Security Operations Manager in IT security engineering, security platform operations, SIEM modernisation, and SecOps process automation.
Engineer, operate, and continuously improve enterprise security platforms, including SIEM, EDR/XDR, security automation/orchestration tools, and security data pipelines.
Support the migration and modernisation of the SIEM environment to Elastic on GCP, including log ingestion, pipeline development, dashboards, alerting, rule tuning, and platform optimisation.
Build and maintain security data pipelines for logs from corporate IT systems, networks, endpoints, identity platforms, cloud services, applications, and security tools.
Improve alert enrichment, investigation workflows, case routing, ticketing integration, operational dashboards, and reporting.
Support security monitoring, alert triage, threat investigation, incident response, detection tuning, and mitigation activities where required.
Translate investigation experience and SecOps pain points into practical engineering improvements, including better detections, false-positive reduction, automation playbooks, and runbooks.
Explore and support AI-enabled SecOps use cases, including anomaly detection, alert enrichment, investigation assistance, behavioural analytics, and automation of repetitive SOC workflows.
Partner with infrastructure, network, cloud, endpoint, identity, application, and cybersecurity teams to improve security visibility and operational effectiveness.
Provide coaching, technical guidance, solution review, and knowledge sharing to team members.
Handle day-to-day security alerts, incidents, operational issues, and service requests in accordance with established procedures and service levels.
Investigate endpoint and identity-related security issues using CrowdStrike telemetry, Active Directory information, authentication records, and system logs.
Support containment and remediation activities, including host isolation, account restriction, evidence collection, and coordination with relevant IT teams.
Manage security requests such as policy changes, exclusions, allowlisting, investigation requests, and user or device follow-up.
Support the administration of CrowdStrike Falcon capabilities, including Endpoint Security, Identity Protection, Fusion SOAR, Real Time Response, Spotlight, and related integrations.
Monitor sensor health, platform coverage, policy compliance, workflow status, and operational exceptions.
Support the configuration and maintenance of endpoint, identity, and automation policies based on approved standards.
Develop and maintain Fusion SOAR workflows for alert enrichment, notification, case creation, triage, and response automation.
Troubleshoot CrowdStrike sensor, policy, integration, and Active Directory-related issues with infrastructure, system, and IT support teams.
Maintain operational procedures, investigation guides, response playbooks, workflow documentation, and knowledge articles.
Participate in security operations, platform improvement, and automation initiatives.
Support ongoing security projects and initiatives.
Assist in reviewing and analyzing security-related information or data.
Help investigate technical issues and identify potential security risks.
Perform research and testing to support security projects.
Document findings, processes, and recommendations.
Work with different teams to understand systems and security requirements.
Explore security tools, automation, and other technologies as part of assigned projects.
