JobCubby JobCubby
Sign up
Yahoo Taiwan Holdings Limited

Sr Technical Security Engineer

Yahoo Taiwan Holdings Limited Taipei, Taiwan

Software Development · 201-500 employees

Aug 03
security Mid (2-5 yrs) Full-time Taiwan
Create a free account to apply — email only, no card. You can also save this posting or score it against your profile with AI.

Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.

About the role

The engineer will manage cloud and SDLC security, including defining requirements, conducting web security assessments, and ensuring compliance with standards like PCI DSS. They will also monitor for threats, respond to security incidents, and drive the adoption of security policies across the organization.

What they look for

Cloud Security SDLC Security Web Security Vulnerability Assessment PCI DSS AWS GCP OWASP Top 10 DevOps Software Architecture Incident Response Security Policy Risk Management Communication Skills

Requirements

Candidates must have a BS/MS in a STEM field or equivalent experience, along with at least 3 years of related professional experience. Proficiency in cloud platforms like AWS or GCP, knowledge of web security vulnerabilities, and experience with the software development life cycle are required.

Full description

Yahoo Taiwan E-Commerce empowers the e-commerce world with advanced business process analytics, reporting, and optimization tools designed to drive success within Yahoo Taiwan E-commerce ecosystem. Innovation is at the core of everything we do — we continuously test, refine, and integrate cutting-edge technologies to stay ahead of the curve and enhance our infrastructure. Our team is dedicated to creating high-quality products and tools that not only prioritize usability and efficiency but also foster sustainable business growth for our customers and partners.

Responsibilities We are looking for a Security Engineer responsible for cloud security, SDLC security, and security planning for TWEC.

  • Collaborate on secure software development processes, including defining security requirements, reviewing software architecture, reviewing code and providing vulnerability consultation.
  • Conduct web security assessments and ensure compliance with standards such as PCI DSS.
  • Develop and maintain scalable strategies and policies to secure TWEC's public cloud platforms.

Drive company-wide adoption of cloud and compute security policies.

  • Design and implement enhancements to identify security misconfigurations accurately. Conduct thorough security reviews and provide project consultation.
  • Evaluate and manage vulnerabilities across cloud environments, prioritize remediation efforts, and ensure continuous monitoring of potential threats.
  • Monitor, evaluate, and respond to security alerts and events. Handle and analyze incidents to support effective resolution.
  • Identify security risks and recommend improvement plans to enhance resilience.

Qualifications

  • BS/MS in a Science/Technology/Engineering/Mathematics related field or equivalent experience

3+ years of related experience

  • Experience with application programming or devops and the overall software development life cycle
  • Good knowledge of web security vulns and countermeasures, including the OWASP Top 10
  • Familiarity with the security features and best practices of major cloud platforms, such as AWS and GCP.
  • Good communication and collaboration skills to work with people from a variety of technical backgrounds

Similar roles