At Tencent, we are dedicated to empowering game studios with cutting-edge infrastructure solutions. We are seeking a Sr.Infra Security Engineer with extensive security and infrastructure experience.
Responsibilities:
As a Senior Security Engineer, you will play a key role in supporting internal and acquired game studios by designing and implementing reliable systems and seamless operations for game publishing. The work scope will include understanding the studios’ business requirements, collecting the technical requirements, developing reference architecture and prototypes based on leading industry best practices, assisting implementation and deployment globally, as well as conducting troubleshooting when necessary.
Develop and maintain security reference architectures and prototypes for game publishing infrastructure, incorporating industry best practices for cloud, network, and application security.
Assist game studios with the global implementation and deployment of security solutions, providing hands-on expert support and advanced troubleshooting.
Design, implement, and manage the global Anti-DDoS strategy to protect low-latency gaming infrastructure, including real-time game servers, matchmaking services, and player APIs.
Configure, operate, and fine-tune a multi-layered security perimeter, including Web Application Firewalls (WAF), IDS/IPS, and multi-vendor DDoS mitigation platforms (on-prem, cloud-native, and CDN).
Create and maintain detailed incident response playbooks tailored to specific games and services, ensuring rapid and repeatable mitigation actions.
Architect and deploy secure, resilient, and high-performance network infrastructure within multi-region cloud environments (AWS, Azure, GCP).
Actively contribute to the estabilishment and enhancement of the SIEM platform and SOC operations by developing advanced detection rules, correlation searches, and automated response actions.
Utilize programming skills (e.g., Python) to develop scripts and automation that streamline security operations, compliance checks, and secure infrastructure deployment.
Bachelor's degree in Computer Science, Cybersecurity, Information Systems or related field.
8+ years of experience in cybersecurity, specializing in infrastructure security, network security and cloud security.
Deep understanding and hands-on expertise in security technologies such as firewalls, IDS/IPS, SIEM, WAF, IAM and cloud security platforms (AWS, Azure, Google Cloud).
Deep understanding and hands-on experience in architecting and managing network and perimeter security, including firewalls, IDS/IPS, VPNs, zero-trust network access, and DDoS protection
Good understanding of network protocols, packet characteristics, and network attack/defense mechanisms.
Hands-on experience in building SIEM platform and SOC operations.
Strong analytical and problem-solving skills with experience in threat modeling, risk assessments, and security incident response
Proficient in programming skills with C++, C#, Python or similar languages.
Good understanding of gaming architectures and Unreal engine is a plus
Relevant certifications (e.g., CEH, OSCP, CREST) are a plus.
Excellent communication and stakeholder management skills with the ability to translate technical risks into business impacts.
Bilingual preferred (English, Chinese) to interact with stakeholders in China HQ and other regions
As an equal opportunity employer, we firmly believe that diverse voices fuel our innovation and allow us to better serve our users and the community. We foster an environment where every employee of Tencent feels supported and inspired to achieve individual and common goals.
