Senior Security Engineer

Joining Razer will place you on a global mission to revolutionize the way the world games. Razer is a place to do great work, offering you the opportunity to make an impact globally while working across a global team located across 5 continents. Razer is also a great place to work, providing you the unique, gamer-centric #LifeAtRazer experience that will put you in an accelerated growth, both personally and professionally.
Job Responsibilities :
The IT Helpdesk Manager is responsible for overseeing and delivering end user IT services while remaining actively involved in day to day technical operations. This is a hands on leadership role that combines people management, service ownership, and direct technical contribution to ensure high quality support, operational stability, and a positive end user experience across the organization.
The role manages a team of support engineers and acts as the primary owner of end user support services, endpoint operations, and helpdesk performance.
Introduction:
Razer is looking for a hands-on Senior Security Engineer to join our Global IT Infrastructure team in Singapore. Your core mission is to design, implement and operate the security controls that protect Razer’s corporate infrastructure across network, endpoint, identity, Microsoft 365, on-premises and public cloud (Azure and AWS) environments, supporting offices across Asia Pacific, Europe and the Americas. Building on that foundation, you will also provide security assurance for enterprise applications and enterprise AI, including conducting VAPT or coordinating vendors to perform it. As Razer becomes an AI-native company, you will make sure the infrastructure, AI agents and LLM-based applications the business builds and adopts are secure by design.
As this is a senior role, the candidate must be a self-directed engineer who can balance security with employee experience, lead security improvements across multiple infrastructure teams, enterprise application teams, Enterprise AI team and clearly explain technical risks to both engineers and management. Proven experience securing complex, international, multi-site environments is required.
Key Responsibilities
Design, implement and maintain network security controls across global offices, including firewalls, SASE / SSE and ZTNA (e.g. Microsoft Entra Private Access and Internet Access), VPN, network access control (NAC), segmentation and web filtering
Engineer and maintain endpoint and server security for Windows devices and on-premises and cloud servers, including Microsoft Defender for Endpoint, Intune security baselines, device compliance and disk encryption, in partnership with Endpoint Engineering
Strengthen identity security in Microsoft Entra ID, including Conditional Access, MFA and passwordless authentication, Privileged Identity Management (PIM), ID Protection, access governance and break-glass account controls, as well as hybrid identity security across Entra Connect and on-premises Active Directory
Configure and maintain Microsoft 365 security, including email protection (Defender for Office 365, SPF, DKIM, DMARC), and implement Microsoft Purview data loss prevention, sensitivity labelling and insider risk controls based on Group Information Security policy
Implement security guardrails and baselines for Azure and AWS, and remediate cloud security posture findings using Microsoft Defender for Cloud and native AWS controls (e.g. IAM, SCPs, GuardDuty, Security Hub)
Run vulnerability management across on-premises, cloud and application environments: prioritise by risk, agree remediation timelines with owners, and report status to IT Infrastructure leadership and Group Information Security
Review infrastructure changes and new designs for security impact, including threat modelling, so security is built into projects from the start
Secure Microsoft 365 Copilot and enterprise AI adoption: prevent data oversharing through Copilot and AI agents, enforce access, labelling and data loss prevention controls, and govern AI agents through Microsoft Agent 365 and Entra Agent ID, in partnership with Group Information Security and the AI platform team
Assess enterprise AI systems, including AI agents, LLM applications and RAG pipelines, for prompt injection, data leakage, excessive agent permissions and insecure tool or MCP integrations, with assurance of the AI platform coordinated with Group Information Security so testing remains independent of those who build the controls
Conduct VAPT on enterprise applications, APIs, cloud workloads, network and on-premises infrastructure, and desktop and mobile applications, within written approval and agreed rules of engagement; scope and manage third-party VAPT engagements through report review, validation and retesting
Embed security testing into CI/CD pipelines with platform and development teams (SAST, DAST, dependency and secrets scanning, container image scanning), setting pass/fail gates and routing findings to owners; the Platform team builds and runs the pipelines
Own the security roadmap and drive cross-team improvements, turning Microsoft security and AI-governance capabilities into deployed, measured controls
Operate Microsoft Defender XDR and contain and remediate affected infrastructure and applications during security incidents, in support of Group Information Security
Act as the IT Infrastructure technical point of contact for security audits and assessments, providing evidence and closing findings
Develop and maintain security standards, configuration baselines, testing methodologies and runbooks
Automate security configuration, testing, compliance checks and reporting using PowerShell, Python and Microsoft Graph API, using AI-assisted tooling where appropriate
Coach infrastructure engineers and developers on secure configuration, secure design and security best practices
Other duties as assigned
Pre-Requisites :
Requirements
Bachelor’s degree in Computer Science, IT or equivalent, with 7+ years of IT infrastructure experience, including at least 4 years in infrastructure or enterprise security engineering
Strong knowledge of the Microsoft security stack: Entra ID (Conditional Access, PIM, ID Protection), Intune, Microsoft Purview and Microsoft Defender XDR (Endpoint, Office 365, Identity, Cloud Apps)
Hands-on experience with SASE / SSE and ZTNA platforms (e.g. Microsoft Entra Private Access and Internet Access, Zscaler, Netskope, Prisma Access), alongside enterprise firewalls (e.g. Fortinet, Check Point), network access control and segmentation
Working knowledge of governing AI agents with Microsoft Agent 365 and Entra Agent ID, and of Microsoft Entra ID Governance
Hands-on experience securing hybrid environments, including on-premises Active Directory, Windows Server and Linux hardening, and data-centre network security
Working knowledge of cloud security on Azure and AWS, including identity, networking and container security
Experience with vulnerability management tools (e.g. Microsoft Defender Vulnerability Management, Tenable, Qualys) and coordinating remediation across multiple teams
Hands-on VAPT experience (2+ years) on web applications and APIs (OWASP Top 10), using tools such as Burp Suite, Nmap and Nessus or equivalents, and experience managing third-party VAPT vendors
Working knowledge of desktop and mobile application security (e.g. OWASP MASVS)
Working knowledge of security tooling in CI/CD pipelines (e.g. OWASP ZAP, OWASP Dependency-Check, Gitleaks, container scanners) and of tuning it to reduce false positives
Understanding of AI-specific security risks (prompt injection, data leakage, shadow AI, insecure agent access) and of frameworks such as OWASP Top 10 for LLM Applications or NIST AI RMF
Scripting skills in PowerShell and/or Python
Working knowledge of security frameworks and standards such as ISO 27001, NIST CSF or CIS Benchmarks
Experience securing complex, multi-site international environments and containing security incidents under time pressure
Analytical and troubleshooting skills, with the ability to balance security requirements and user experience
Excellent written and verbal communication, including writing clear findings with risk ratings and explaining technical risk to non-technical stakeholders, and the ability to work independently and in a global team
Hands-on testing of AI systems (LLM red-teaming, agent and MCP security testing, RAG data-exposure testing) is an added advantage
Experience with Microsoft Sentinel and Security Copilot is an added advantage
Exposure to securing enterprise AI platforms (e.g. Microsoft Foundry, Azure OpenAI, Amazon Bedrock) is an added advantage
Experience with PAM solutions, secure code review or DevSecOps practices is an added advantage
Certifications such as SC-300, SC-200, SC-100, AZ-500, AWS Certified Security – Specialty, CCNP Security, PCNSE, CISSP, OSCP or