Senior Infrastructure Security Engineer

Tencent Overseas IT has the mission to empower Tencent’s rapid global growth with future ready, global IT platforms, applications and services. We are chartered to lead the Overseas IT strategy, architecture, roadmap and execution. Satisfying our internal/external customers and becoming a world class global IT team are our top aspirations.

Responsibilities:

• As a Senior Security Engineer, you will play a key role in supporting internal and acquired game studios by designing and implementing reliable systems and seamless operations for game publishing. The work scope will include understanding the studios’ business requirements, collecting the technical requirements, developing reference architecture and prototypes based on leading industry best practices, assisting implementation and deployment globally, as well as conducting troubleshooting when necessary.
• Develop and maintain security reference architectures and prototypes for game publishing infrastructure, incorporating industry best practices for cloud, network, and application security.
• Assist game studios with the global implementation and deployment of security solutions, providing hands-on expert support and advanced troubleshooting.
• Design, implement, and manage the global Anti-DDoS strategy to protect low-latency gaming infrastructure, including real-time game servers, matchmaking services, and player APIs.
• Configure, operate, and fine-tune a multi-layered security perimeter, including Web Application Firewalls (WAF), IDS/IPS, and multi-vendor DDoS mitigation platforms (on-prem, cloud-native, and CDN).
• Create and maintain detailed incident response playbooks tailored to specific games and services, ensuring rapid and repeatable mitigation actions.
• Architect and deploy secure, resilient, and high-performance network infrastructure within multi-region cloud environments (AWS, Azure, GCP).
• Actively contribute to the establishment and enhancement of the SIEM platform and SOC operations by developing advanced detection rules, correlation searches, and automated response actions.
• Utilize programming skills (e.g., Python) to develop scripts and automation that streamline security operations, compliance checks, and secure infrastructure deployment.

Job Requirements

• Bachelor's degree in Computer Science, Cybersecurity, Information Systems or related field.
• 8+ years of experience in cybersecurity, specializing in infrastructure security, network security and cloud security.
• Deep understanding and hands-on expertise in security technologies such as firewalls, IDS/IPS, SIEM, WAF, IAM and cloud security platforms (AWS, Azure, Google Cloud).
• Deep understanding and hands-on experience in architecting and managing network and perimeter security, including firewalls, IDS/IPS, VPNs, zero-trust network access, and DDoS protection
• Good understanding of network protocols, packet characteristics, and network attack/defense mechanisms.
• Hands-on experience in building SIEM platform and SOC operations.
• Strong analytical and problem-solving skills with experience in threat modeling, risk assessments, and security incident response
• Proficient in programming skills with C++, C#, Python or similar languages.
• Good understanding of gaming architectures and Unreal engine is a plus
• Relevant certifications (e.g., CEH, OSCP, CREST) are a plus.
• Excellent communication and stakeholder management skills with the ability to translate technical risks into business impacts.
• Bilingual preferred (English, Chinese) to interact with stakeholders in China HQ and other regions

Tencent is an equal opportunities employer and welcomes applications from all qualified candidates.