Sr Technical Security Engineer

Yahoo Taiwan E-Commerce empowers the e-commerce world with advanced business process analytics, reporting, and optimization tools designed to drive success within Yahoo Taiwan E-commerce ecosystem. Innovation is at the core of everything we do — we continuously test, refine, and integrate cutting-edge technologies to stay ahead of the curve and enhance our infrastructure. Our team is dedicated to creating high-quality products and tools that not only prioritize usability and efficiency but also foster sustainable business growth for our customers and partners.

Responsibilities

We are looking for a Security Engineer responsible for cloud security, SDLC security, and security planning for TWEC.

• Collaborate on secure software development processes, including defining security requirements, reviewing software architecture, reviewing code and providing vulnerability consultation.
• Conduct web security assessments and ensure compliance with standards such as PCI DSS.
• Develop and maintain scalable strategies and policies to secure TWEC's public cloud platforms.

Drive company-wide adoption of cloud and compute security policies.

• Design and implement enhancements to identify security misconfigurations accurately. Conduct thorough security reviews and provide project consultation.
• Evaluate and manage vulnerabilities across cloud environments, prioritize remediation efforts, and ensure continuous monitoring of potential threats.
• Monitor, evaluate, and respond to security alerts and events. Handle and analyze incidents to support effective resolution.
• Identify security risks and recommend improvement plans to enhance resilience.

Qualifications

• BS/MS in a Science/Technology/Engineering/Mathematics related field or equivalent experience 3+ years of related experience
• Experience with application programming or devops and the overall software development life cycle
• Good knowledge of web security vulns and countermeasures, including the OWASP Top 10
• Familiarity with the security features and best practices of major cloud platforms, such as AWS and GCP.
• Good communication and collaboration skills to work with people from a variety of technical backgrounds