Cybersecurity Engineer (Anti-Fraud & Content Security)

Key Responsibilities

1. Analyze security risk data and fraudulent behaviors across Xiaomi's international markets; design, validate, and deploy anti-fraud detection strategies and security controls.
2. Design, develop, and implement secure system architectures for anti-fraud and content security platforms; embed security principles into system design to mitigate risks posed by new technologies and evolving business practices.
3. Own daily content security operations for international markets: develop and tune machine-based and human-review rules and SOPs to ensure zero leakage of violative content.
4. Track the latest attack-and-defense trends in the industry, conduct threat modeling on emerging fraud vectors, and apply insights to harden detection systems and product security posture.
5. Conduct threat modeling and adversarial analysis on fraud attack vectors (e.g., account takeover, fake-account farming, transaction abuse, content manipulation); translate findings into detection logic, risk-scoring models, and preventive countermeasures.
6. Collaborate cross-functionally with engineering, data, product, and legal/compliance teams to embed security and fraud-prevention controls into platform architecture and the software development lifecycle.

Requirements

1. Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field; able to independently build data experiments and drive the full cycle of security strategy evaluation and deployment.
2. Experience in secure system architecture design and implementation; ability to embed security-by-design principles into enterprise platforms and services.
3. Data-driven approach; proficient in SQL/Python/Excel and capable of mobilizing cross-functional resources to implement security solutions.
4. Strong understanding of common fraud attack patterns, bot abuse, and content-evasion techniques; exceptional risk intuition and problem-solving skills to quickly identify root causes of emerging cybersecurity threats and deliver actionable security countermeasures.
5. Familiarity with security audit processes, compliance frameworks, and maintaining security documentation and standard operating procedures.
6. Ability to communicate in Mandarin and English, in order to support coordination and collaboration with Mandarin-speaking stakeholders, teams, and business partners across regional markets.