Senior Security Engineer

Joining Razer will place you on a global mission to revolutionize the way the world games. Razer is a place to do great work, offering you the opportunity to make an impact globally while working across a global team located across 5 continents. Razer is also a great place to work, providing you the unique, gamer-centric #LifeAtRazer experience that will put you in an accelerated growth, both personally and professionally.

Introduction:

Razer is looking for a hands-on Senior Security Engineer to join our Global IT Infrastructure team in Singapore. Your core mission is to design, implement and operate the security controls that protect Razer’s corporate infrastructure across network, endpoint, identity, Microsoft 365, on-premises and public cloud (Azure and AWS) environments, supporting offices across Asia Pacific, Europe and the Americas. Building on that foundation, you will also provide security assurance for enterprise applications and enterprise AI, including conducting VAPT or coordinating vendors to perform it. As Razer becomes an AI-native company, you will make sure the infrastructure, AI agents and LLM-based applications the business builds and adopts are secure by design.

As this is a senior role, the candidate must be a self-directed engineer who can balance security with employee experience, lead security improvements across multiple infrastructure teams, enterprise application teams, Enterprise AI team and clearly explain technical risks to both engineers and management. Proven experience securing complex, international, multi-site environments is required.

Key Responsibilities

• →Design, implement and maintain network security controls across global offices, including firewalls, SASE / SSE and ZTNA (e.g. Microsoft Entra Private Access and Internet Access), VPN, network access control (NAC), segmentation and web filtering
• →Engineer and maintain endpoint and server security for Windows devices and on-premises and cloud servers, including Microsoft Defender for Endpoint, Intune security baselines, device compliance and disk encryption, in partnership with Endpoint Engineering
• →Strengthen identity security in Microsoft Entra ID, including Conditional Access, MFA and passwordless authentication, Privileged Identity Management (PIM), ID Protection, access governance and break-glass account controls, as well as hybrid identity security across Entra Connect and on-premises Active Directory
• →Configure and maintain Microsoft 365 security, including email protection (Defender for Office 365, SPF, DKIM, DMARC), and implement Microsoft Purview data loss prevention, sensitivity labelling and insider risk controls based on Group Information Security policy
• →Implement security guardrails and baselines for Azure and AWS, and remediate cloud security posture findings using Microsoft Defender for Cloud and native AWS controls (e.g. IAM, SCPs, GuardDuty, Security Hub)
• →Run vulnerability management across on-premises, cloud and application environments: prioritise by risk, agree remediation timelines with owners, and report status to IT Infrastructure leadership and Group Information Security
• →Review infrastructure changes and new designs for security impact, including threat modelling, so security is built into projects from the start
• →Secure Microsoft 365 Copilot and enterprise AI adoption: prevent data oversharing through Copilot and AI agents, enforce access, labelling and data loss prevention controls, and govern AI agents through Microsoft Agent 365 and Entra Agent ID, in partnership with Group Information Security and the AI platform team
• →Assess enterprise AI systems, including AI agents, LLM applications and RAG pipelines, for prompt injection, data leakage, excessive agent permissions and insecure tool or MCP integrations, with assurance of the AI platform coordinated with Group Information Security so testing remains independent of those who build the controls
• →Conduct VAPT on enterprise applications, APIs, cloud workloads, network and on-premises infrastructure, and desktop and mobile applications, within written approval and agreed rules of engagement; scope and manage third-party VAPT engagements through report review, validation and retesting
• →Embed security testing into CI/CD pipelines with platform and development teams (SAST, DAST, dependency and secrets scanning, container image scanning), setting pass/fail gates and routing findings to owners; the Platform team builds and runs the pipelines
• →Own the security roadmap and drive cross-team improvements, turning Microsoft security and AI-governance capabilities into deployed, measured controls
• →Operate Microsoft Defender XDR and contain and remediate affected infrastructure and applications during security incidents, in support of Group Information Security
• →Act as the IT Infrastructure technical point of contact for security audits and assessments, providing evidence and closing findings
• →Develop and maintain security standards, configuration baselines, testing methodologies and runbooks
• →Automate security configuration, testing, compliance checks and reporting using PowerShell, Python and Microsoft Graph API, using AI-assisted tooling where appropriate
• →Coach infrastructure engineers and developers on secure configuration, secure design and security best practices
• →Other duties as assigned

Requirements

• Bachelor’s degree in Computer Science, IT or equivalent, with 7+ years of IT infrastructure experience, including at least 4 years in infrastructure or enterprise security engineering
• Strong knowledge of the Microsoft security stack: Entra ID (Conditional Access, PIM, ID Protection), Intune, Microsoft Purview and Microsoft Defender XDR (Endpoint, Office 365, Identity, Cloud Apps)
• Hands-on experience with SASE / SSE and ZTNA platforms (e.g. Microsoft Entra Private Access and Internet Access, Zscaler, Netskope, Prisma Access), alongside enterprise firewalls (e.g. Fortinet, Check Point), network access control and segmentation
• Working knowledge of governing AI agents with Microsoft Agent 365 and Entra Agent ID, and of Microsoft Entra ID Governance
• Hands-on experience securing hybrid environments, including on-premises Active Directory, Windows Server and Linux hardening, and data-centre network security
• Working knowledge of cloud security on Azure and AWS, including identity, networking and container security
• Experience with vulnerability management tools (e.g. Microsoft Defender Vulnerability Management, Tenable, Qualys) and coordinating remediation across multiple teams
• Hands-on VAPT experience (2+ years) on web applications and APIs (OWASP Top 10), using tools such as Burp Suite, Nmap and Nessus or equivalents, and experience managing third-party VAPT vendors
• Working knowledge of desktop and mobile application security (e.g. OWASP MASVS)
• Working knowledge of security tooling in CI/CD pipelines (e.g. OWASP ZAP, OWASP Dependency-Check, Gitleaks, container scanners) and of tuning it to reduce false positives
• Understanding of AI-specific security risks (prompt injection, data leakage, shadow AI, insecure agent access) and of frameworks such as OWASP Top 10 for LLM Applications or NIST AI RMF
• Scripting skills in PowerShell and/or Python
• Working knowledge of security frameworks and standards such as ISO 27001, NIST CSF or CIS Benchmarks
• Experience securing complex, multi-site international environments and containing security incidents under time pressure
• Analytical and troubleshooting skills, with the ability to balance security requirements and user experience
• Excellent written and verbal communication, including writing clear findings with risk ratings and explaining technical risk to non-technical stakeholders, and the ability to work independently and in a global team
• Hands-on testing of AI systems (LLM red-teaming, agent and MCP security testing, RAG data-exposure testing) is an added advantage
• Experience with Microsoft Sentinel and Security Copilot is an added advantage
• Exposure to securing enterprise AI platforms (e.g. Microsoft Foundry, Azure OpenAI, Amazon Bedrock) is an added advantage
• Experience with PAM solutions, secure code review or DevSecOps practices is an added advantage
• Certifications such as SC-300, SC-200, SC-100, AZ-500, AWS Certified Security – Specialty, CCNP Security, PCNSE, CISSP, OSCP or GPEN are an added advantage

Razer is proud to be an Equal Opportunity Employer. We believe that diverse teams drive better ideas, better products, and a stronger culture. We are committed to providing an inclusive, respectful, and fair workplace for every employee across all the countries we operate in. We do not discriminate on the basis of race, ethnicity, colour, nationality, ancestry, religion, age, sex, sexual orientation, gender identity or expression, disability, marital status, or any other characteristic protected under local laws. Where needed, we provide reasonable accommodations - including for disability or religious practices - to ensure every team member can perform and contribute at their best.