Founded in 2014, Circles is a global technology company reimagining the telco industry with its innovative SaaS platform, empowering telco operators worldwide to effortlessly launch innovative digital brands or refresh existing ones, accelerating their transformation into techcos.
Today, Circles partners with leading telco operators across multiple countries and continents, including KDDI Corporation, Etisalat Group (e&), AT&T, and Telkomsel, creating blueprints for future telco and digital experiences enjoyed by millions of consumers globally.
Besides its SaaS business, Circles operates three other distinct businesses:
- Circles.Life: A wholly-owned digital lifestyle telco brand based in Singapore, Circles.Life is powered by Circles SaaS platform and pioneering go-to-market strategies. It is the digital market leader in Singapore and has won numerous awards for marketing, customer service, and innovative product offerings beyond connectivity.
- Circles Aspire: A global provider of Communications Platform-as-a-Service (CPaaS) solutions. Its cloud-based Experience Cloud platform enables enterprises, service providers and developers to deliver and scale mobile, messaging, IoT, and connectivity services worldwide.
- Jetpac: Specializing in travel tech solutions, Jetpac provides seamless eSIM roaming for over 200 destinations and innovative travel lifestyle products, redefining connectivity for digital travelers. Jetpac was awarded Travel eSIM of the Year.
Circles is backed by renowned global investors, including Peak XV Partners (formerly Sequoia), Warburg Pincus, Founders Fund, and EDBI (the investment arm of the Singapore Economic Development Board), with a track record of backing industry challengers.
About This Role
As a Engineer II, Security Engineering, you will be given a unique opportunity to solve security challenges in our Cloud environments and work on high impact projects.
As a subject matter expert for security engineering, you will be responsible for:
- Lead the efforts and projects to ensure Security in the code and infrastructure in accordance to the definitions of the shared service model;
- Implement secure by design principles in the S-SDLC
- Building partnership with internal stakeholders to draw out security standards for SAST, SCA, DAST, Container images
- Conduct security due diligence of the new solutions and features planned to be introduced in the product
- Conduct penetration testing of the application to identify security gaps and drive remediation with engineering teams
- Drive standardization of best practices across all aspects of SDLC and Cloud Security
- Advise engineering teams on application and infrastructure design to ensure security is embedded throughout the lifecycle
- Review and configure Web Application Firewalls(WAF) to protect against emerging threats
- Identify potential gaps in existing environments, areas to improve our security posture by comparing against the baseline security standards
- Identify and prioritize critical audit logs based on the organization's infrastructure, applications, and security requirements;
What are we looking for
- 2 to 5 years of security related experience.
- Proficient in any one programming language (e. g. Golang, Python, JavaScript, etc. )
- Passion for security, a practical and balanced approach to security issues
- Understand VMs, docker containers and their orchestration with its challenges (e. g. Kubernetes, Docker)
- Knowledge and understanding of OWASP Top 10 and knowledge of potential attack vectors such as XSS, injection, hijacking, social engineering, and so on Vulnerability scanning and patch management.
- Experience in doing security assessments on web applications, Android and iOS mobile applications in microservice architecture
- Experience in using security tools to conduct manual and automated security assessments
- Experience working with common product flows like payment gateway integration, authentication etc.
- Sound understanding of security related to AWS, GCP and Kubernetes.
- Understanding of Web Application Firewall.
- Sound understanding of Database security.
- Knowledge and deep understanding of security engineering best practices.
- Knowledge of networking protocols, such as TCP/IP, and http/https.
- Critical thinker, good communicator and problem-solving skills.
Circles is committed to a diverse and inclusive workplace. We are an equal opportunity employer and do not discriminate on the basis of race, national origin, gender, disability or age.
Data Protection and Privacy Statement
By submitting an application for this position, you, as the applicant, or your authorised representative(s), consent to
Circles Candidate Data Protection and Privacy Policy. You also agree to the collection, use, and/or disclosure of your personal data by us solely for recruitment purposes as specified in the Policy. You acknowledge that you have read and understood the Policy, are aware of your rights regarding your personal data, and accept the terms relating to international data transfers, where applicable. You further understand that you may withdraw consent at any time, which may affect our ability to consider your application. In instances where your personal data or application is submitted by a third party, it is understood that such third party has been duly authorised by you to disclose the relevant personal data and provide consent on your behalf, and that you have been made aware of this Policy.
To all recruitment agencies: Circles will only acknowledge resumes shared by recruitment agencies if selected in our preferred supplier partnership program.
Please do not forward resumes to our jobs alias, Circles, employees or any other company location. Circles will not be held accountable for any fees related to unsolicited resumes not uploaded via our ATS.
