Cybersecurity Engineer (Security Operations) - Junior

Job Summary Manage and enhance Xiaomi’s international security systems, lead API security framework development, oversee vulnerability management, and ensure compliance with global data protection regulations to safeguard web and mobile applications.

Manage the full lifecycle of core security solutions (WAF, MiShield, HIDS) for Xiaomi’s international business, including configuring policies, optimizing rules, and expanding coverage to protect web and mobile applications against threats such as OWASP Top 10 Develop real-time monitoring and alerting frameworks to analyze security logs, detect anomalous traffic and attacks, produce root-cause analysis reports, and improve defense strategies Contribute to the design and implementation of an API security framework for international operations, creating models for abnormal behavior detection and access control to prevent unauthorized data access and API abuse Integrate API security with gateways and microservices, incorporate SAST/DAST tools to promote shift-left security practices, and establish developer security guidelines Oversee vulnerability management processes including scanning, risk assessment, and remediation for international business, implementing high-risk vulnerability response mechanisms and collaborating with R&D teams on code-level fixes Monitor global threat intelligence and zero-day vulnerabilities, organize red/blue team exercises, and refine emergency response protocols Ensure security operati