Senior Information Security Engineer

Job Summary:
The Information Security Engineer is responsible for implementing, maintaining, and improving the
organization’s cybersecurity program across domestic and international operations. This role provides
technical expertise in security architecture, risk management, vulnerability remediation, security
controls, and compliance initiatives. The position also supports ISO 27001 governance activities,
facilitates communication between US and global teams, and assists with the execution of enterprise
security projects and directives.

Duties/Responsibilities:
• Assess, implement, and maintain technical security controls across infrastructure, systems,
networks, and applications.
• Conduct security reviews of systems, configurations, and proposed technology changes.
• Support vulnerability management activities, including identification, prioritization, remediation
tracking, and validation.
• Perform security risk assessments for new technologies, projects, and operational processes.
• Assist with security incident investigations, root cause analysis, and corrective action planning.
• Develop and maintain security standards, procedures, and technical documentation.
• Evaluate emerging threats and recommend appropriate security countermeasures.

Required Skills/Abilities:
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science.
• Cybersecurity Engineering
• Risk Assessment & Management
• Vulnerability Management
• Security Architecture Review
• ISO 27001 Lead Auditor or Internal Auditor certification.
• Technical Documentation

• Cross-Functional Collaboration
• Bilingual Communication (English/Mandarin)
• Security Testing
Education and Experience
• Master’s degree is preferred.
• 2-5+ years of information security, cybersecurity, or IT security experience.
• Thesis or publication in information security is a plus.
• Experience with ISO 27001 and TISAX implementation, auditing, or compliance management.
• Experience working within multinational organizations.
• Strong understanding of risk management, security controls, and security governance frameworks.
• Professional proficiency in both English and Mandarin Chinese.
• EC-Council Certified Ethical Hacker (CEH) certification is also preferred.
Physical Requirements:
• Ability to walk and stand on cement floors for extended periods.
• Ability to stand, stoop, bend, and perform repetitive tasks.
• Prolonged periods of sitting at a desk and working on a computer.
• Must be able to lift to thirty pounds at a time.