Senior Infrastructure Security Engineer

About This Opportunity

Our talent team is representing a confidential healthcare technology organization seeking a Senior Infrastructure Security Engineer in Macao. This role focuses on operating and maturing attack surface management and breach attack simulation programs across hybrid, cloud, and on-premises environments. You'll strengthen security visibility and risk reduction by validating internet-facing assets, assessing security coverage, executing simulation exercises, and producing actionable reporting.

Responsibilities

• Operate and mature attack surface management (ASM) and breach attack simulation (BAS) programs across enterprise environments
• Validate internet-facing assets, confirm ownership, and maintain inventory accuracy
• Coordinate remediation activities and execute breach attack simulation exercises
• Monitor and remediate security alerts including malware, injection attacks, and unauthorized access
• Implement and maintain application security standards per industry best practices
• Perform architectural analysis to detect critical deficiencies and recommend improvements
• Automate routine operational tasks and design self-service security options
• Implement security solutions including authentication, authorization, encryption, and logging throughout SSDLC
• Create security documentation, standard operating procedures, and track findings to closure
• Produce security reporting and metrics for cross-functional stakeholders

What We're Looking For

Required:

• Bachelor's degree in statistics, mathematics, engineering, computer science, or related quantitative field
• 4–6 years of related infrastructure security experience
• Technical proficiency with attack surface management platforms (Tenable, Wiz)
• Experience with breach attack simulation and control validation tooling
• Knowledge of asset visibility and vulnerability management solutions (Armis Centrix, Armis VIPR, Tenable, Wiz)
• Proficiency with ServiceNow, Microsoft 365, SharePoint, Power BI, Jira, and project tracking tools
• Intermediate analytical and project management skills
• Ability to work independently with high accuracy under pressure

Preferred:

• Attack surface management and external asset discovery experience
• Adversary emulation and security detection improvement background
• Asset inventory management and ownership validation expertise
• Vulnerability management and remediation coordination experience
• Security reporting and metrics development capabilities
• CompTIA Security+ Certification

How We Work with You

Candidates apply directly through Get A Job.ai. Our recruiting team conducts an initial screening to understand your background and match you with the right opportunity. We then submit qualified candidates to our client for consideration. Please do not contact the client organization directly—all communication flows through our team to ensure a smooth, professional process.

Pay

Compensation details will be discussed during the screening process with our recruiting team.

Equal Employment Opportunity: Get A Job.ai is committed to diversity and inclusion. We consider all qualified applicants regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or other protected characteristics.