Network Security Engineer

Bitdeer is a world-leading technology company for Bitcoin mining and AI cloud.

As a Network Security Engineer on Bitdeer AI Cloud's Infrastructure Security team, you will design, govern, and continuously validate the network security architecture across multiple AIDCs (AI Data Centers). The core mission is to transform today's manual, ad-hoc network access auditing into an engineered, automated, and measurable continuous-governance system — fundamentally containing the blast radius of any single point of compromise. This role sits within Infrastructure Security and reports to the Head of Security; detections it produces are handed off to SecOps for response.

• Network security architecture & segmentation — Own the multi-AIDC network trust model and segmentation (north-south perimeter, east-west interconnect, micro-segmentation, Zero Trust), continuously reducing the attack surface from a malicious-tenant / supply-chain-attacker perspective.
• Access policy lifecycle governance — Govern the design, review, and revocation of firewall rules, security groups, and ZTNA/Zscaler policies; drive Policy-as-Code, least-privilege, and TTL-based policy re-certification.
• Continuous validation & audit automation — Build network policy drift detection and compliance-validation automation, replacing ad-hoc manual checks with continuous dashboards.
• Endpoint & remote access security — Design fine-grained employee-endpoint → AIDC access control (identity + device posture); route privileged access through PAM/bastion + MFA.
• Network monitoring & lateral-movement detection — Establish east-west traffic baselines and lateral-movement detection; hand off anomalies to SecOps for response.
• AIDC fabric & management-plane security — Partner with Infrastructure/Hardware Security to harden high-speed fabric (InfiniBand/RoCE/UFM), management network (BMC/IPMI), and storage network isolation.
• Edge & DDoS protection — Own perimeter protection and DDoS mitigation (e.g., Cloudflare-class), making explicit trade-offs between security and latency / performance budgets.
• Compliance support — Provide network-layer control mapping and audit evidence for SOC2 / ISO 27001 / NIST.

• 5+ years in network security engineering, with hands-on cloud / data center network security experience.
• Strong command of network segmentation, Zero Trust, firewall & security-group policy, ZTNA (e.g., Zscaler), and SASE.
• Familiar with public / private cloud network security (VPC/NSG, security groups, IaC).
• Policy-as-Code and automation skills (Terraform / Ansible; Python or Go scripting).
• Experience with network monitoring / NDR, flow analysis, and lateral-movement detection.
• Adversarial mindset — able to assess architectural weaknesses from an attacker's view and deliver risk-graded (CRITICAL–LOW) mitigation and detection strategies.
• AI data center / GPU cluster networking experience; familiarity with InfiniBand/RoCE/UFM.
• eBPF-based observability (Tetragon / Cilium).
• Financial-grade / high-compliance industry security background.
• CISSP / CCNP Security or equivalent certification.
• Working proficiency in both Chinese and English.

• A culture that values authenticity and diversity of thoughts and backgrounds;
• An inclusive and respectable environment with open workspaces and exciting start-up spirit;
• Fast-growing company with the chance to network with industrial pioneers and enthusiasts;
• Ability to contribute directly and make an impact on the future of the digital asset industry;
• Involvement in new projects, developing processes/systems;
• Personal accountability, autonomy, fast growth, and learning opportunities;
• Attractive welfare benefits and developmental opportunities such as training and mentoring.

--------------------------------------------------------------------

#LI-ST1