Bjak logo

Security Architect

Bjak
NewPosted today

LOCATION

China · Remote

EXPERIENCE

5+ Years

TYPE

FullTime

SKILLS REQUIRED

Threat ModelingCloud SecurityIdentity and Access ManagementRegulatory ComplianceRisk Assessment

Job description

Overview

Define security architecture across BJAK products, applications, cloud platforms, and infrastructure, partnering with Engineering, Product, Cloud, Compliance, and Security to build secure systems and meet regulatory requirements.

What you'll do

  • Define security architecture, patterns, and standards across products, applications, APIs, cloud environments, and integrations.
  • Own architecture implementation and ongoing alignment with SC TRM and BNM RMiT, including control evidence, reviews, remediation, and audit support.
  • Lead threat modeling and security design reviews for new products, major changes, third-party integrations, and critical systems.
  • Design and review IAM, privileged access, network security, encryption, key management, secrets, logging, and threat detection controls.
  • Review web, API, native mobile, AI-enabled, and data processing architectures for security and privacy risks.
  • Guide secure architecture across TypeScript/Node.js, Python, Swift, and Kotlin applications and services on AWS and GCP.
  • Evaluate security technologies, advise engineering leaders, and track remediation of material architecture risks.

What you'll need

  • Degree in Computer Science, Information Security, or related field, or equivalent experience.
  • 5+ years in security engineering, security architecture, or a related security role.
  • Experience implementing and owning SC TRM and BNM RMiT requirements, including control operation, evidence, and audit remediation.
  • Strong knowledge of cloud and application security, IAM, networking, encryption, secure design, and distributed systems.
  • Hands-on familiarity with AWS and GCP and architectures using TypeScript/Node.js, Python, Swift, and Kotlin.
  • Experience with threat modeling, architecture reviews, risk assessments, and frameworks such as ISO 27001, NIST, CIS, or OWASP.
  • Able to translate regulatory and technical risks into clear, actionable plans for technical and non-technical stakeholders.
  • Strong English communication is required.

Details

  • English is the main working language across global teams.

Read the full description and apply on the company’s own careers page.

Stay safe

Hiring on Abekus is free for applicants

We never charge a fee, and employers are prohibited from doing so. If a recruiter asks for payment, please report them right away.

Security Architect