Senior Cloud Software Engineer - Security

ABOUT US:

Headquartered in the United States, TP-Link Systems Inc. is a global provider of reliable networking devices and smart home products, consistently ranked as the world's top provider of Wi-Fi devices. The company is committed to delivering innovative products that enhance people's lives through faster, more reliable connectivity. With a commitment to excellence, TP-Link serves customers in over 170 countries and continues to grow its global footprint.

We believe technology changes the world for the better! At TP-Link Systems Inc, we are committed to crafting dependable, high-performance products to connect users worldwide with the wonders of technology.

Embracing professionalism, innovation, excellence, and simplicity, we aim to assist our clients in achieving remarkable global performance and enable consumers to enjoy a seamless, effortless lifestyle.

KEY RESPONSIBILITIES

* Design and implement a security governance framework for the cloud-native infrastructure platform, continuously improving the overall security posture and governance maturity of the platform.

* Build platformized security capabilities, including the evaluation, integration, and adoption of security components, as well as secondary development and capability enhancement based on business and platform needs.

* Design and develop automated security auditing platforms to enable automated security checks, risk detection, compliance validation, and remediation workflows.

* Build security threat detection and alerting capabilities to improve identification, warning, and response for abnormal behaviors, potential attacks, and security risks.

* Participate deeply in the security design of cloud-native platforms and infrastructure systems, and drive capabilities such as access control, network isolation, host hardening, and system-level security governance.

* Define and continuously optimize security policies, standards, and enforcement mechanisms based on security operation principles such as least privilege and firewall policy management.

* Collaborate closely with infrastructure, architecture, engineering, and operations teams to embed security capabilities into the platform lifecycle and improve the default security baseline and operational readiness of the platform.

* Stay up to date with common attack techniques, security risks, and defense best practices, and continuously evolve the company's infrastructure security governance and platform capabilities.