Senior Cloud Security Engineer
About Us
Headquartered in the United States, TP-Link Systems Inc. is a global provider of reliable networking devices and smart home products, consistently ranked as the world's top provider of Wi-Fi devices. The company is committed to delivering innovative products that enhance people's lives through faster, more reliable connectivity. With a commitment to excellence, TP-Link Systems serves customers in over 170 countries and continues to grow its global footprint. We believe technology changes the world for the better!
Overview
The Senior Cloud Security Engineer strengthens the security of our cloud environments through hands-on engineering: identifying and remediating risk, improving visibility, and automating security operations. This role turns security data into actionable insight and measurable risk reduction — finding what's exposed, prioritizing what matters, and driving fixes to closure. You'll partner closely with cloud operations, SRE, DevOps, and engineering teams across a globally distributed organization, and communicate cloud security posture clearly to both technical and non-technical stakeholders. This is a deeply hands-on technical role for an engineer who builds rather than just operates. You'll design controls, write automation, develop the dashboards and workflows that make security visible and repeatable, and apply modern AI tooling as a core part of how the work gets done.
Requirements
3-5+ years of hands-on cloud security, infrastructure security, or security engineering experience
Cloud security certification: AWS Certified Security - Specialty or Microsoft Certified: Azure Security Engineer Associate (AZ-500)
Deep working fluency in AWS security — IAM, VPC networking, logging and detection, encryption/KMS, secure configuration at scale
Hands-on experience securing production Azure environments, including Entra ID and core Azure security services
Experience securing Kubernetes workloads and containerized environments
Significant experience with an enterprise CSPM/CNAPP platform such as Orca, Wiz, Prisma Cloud, or Microsoft Defender for Cloud
Proven, hands-on use of agentic AI and LLM tooling as a primary engineering method — workflows built, automations shipped, and a working grasp of where these systems fail
Working knowledge of frameworks such as ISO 27001, ISO/IEC 42001, SOC 2, NIST CSF, CIS Benchmarks, or GDP
Experience leading and executing enterprise security incident response activities
Bachelor's degree in a technical field
Preferred Qualifications
AWS Certified Solutions Architect - Associate and/or Azure architecture certification (AZ-104 or AZ-305)
Experience securing hybrid, private cloud, or on-premises infrastructure
Proficiency with KQL, SQL, Python, Grafana, or Power BI for security analytics
Infrastructure as code and CI/CD pipeline security
Collaboration with globally distributed engineering and operations teams
Mandarin/English bilingual proficiency