Cybersecurity Engineer (Anti-Fraud & Content Security)

Job description

Key Responsibilities

• Analyze security risk data and fraudulent behaviors across Xiaomi's international markets; design, validate, and deploy anti-fraud detection strategies and security controls.
• Design, develop, and implement secure system architectures for anti-fraud and content security platforms; embed security principles into system design to mitigate risks posed by new technologies and evolving business practices.

Own daily content security operations for international markets

• develop and tune machine-based and human-review rules and SOPs to ensure zero leakage of violative content.
• Track the latest attack-and-defense trends in the industry, conduct threat modeling on emerging fraud vectors, and apply insights to harden detection systems and product security posture.
• Conduct threat modeling and adversarial analysis on fraud attack vectors (e.g., account takeover, fake-account farming, transaction abuse, content manipulation); translate findings into detection logic, risk-scoring models, and preventive countermeasures.
• Collaborate cross-functionally with engineering, data, product, and legal/compliance teams to embed security and fraud-prevention controls into platform architecture and the software development lifecycle.

Qualifications

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field; able to independently build data experiments and drive the full cycle of security strategy evaluation and deployment.
• Experience in secure system architecture design and implementation; ability to embed security-by-design principles into enterprise platforms and services.
• Data-driven approach; proficient in SQL/Python/Excel and capable of mobilizing cross-functional resources to implement security solutions.
• Strong understanding of common fraud attack patterns, bot abuse, and content-evasion techniques; exceptional risk intuition and problem-solving skills to quickly identify root causes of emerging cybersecurity threats and deliver actionable security countermeasures.
• Familiarity with security audit processes, compliance frameworks, and maintaining security documentation and standard operating procedures.
• Ability to communicate in Mandarin and English, in order to support coordination and collaboration with Mandarin-speaking stakeholders, teams, and business partners across regional markets.