Information Security Engineer (Europe and US Region)

Lalamove is disrupting the logistics industry by connecting customers and drivers directly through our technology. We offer customers a lightning fast and convenient way to book delivery and moving services whether they are at their home, at work or on the go. People talk about O2O, we live it!  Currently, Lalamove is a leading global on-demand delivery platform with millions of delivery partners serving millions of orders everyday. With 1600+ employees spread across SEA and LATAM, our 10-year old company has reached unicorn status in 2018, is well funded by prominent VCs and has kept growing at tremendous speed since.  Our strength lies in our internal values, namely Passion in serving local communities, empowering SMEs and our driver partners, Execution and Grit because that is how we differentiate ourselves by never giving up and striving for excellence, and Humility - awareness in ourselves to learn from others and never stop improving.  At Lalamove, we strongly believe in the power of community. Millions of drivers and customers use our technology every day to connect with one another and move things that matter. Delivery is what we do best and we ensure it is always fast and simple. Since 2013, we have tackled the logistics industry head on to find the most innovative solutions for the world’s delivery needs. Our vision is to bring communities closer and make city life easier by allowing fast and convenient circulation of goods. We realize this vision with a ‘glocal’ approach, building a robust operations team to adapt our product to local networks of businesses and delivery contractors. At the same time, we have ambition to build an international brand by establishing an even more global presence. We are hiring a Junior Information Security Engineer to support day-to-day security incident monitoring and handling across our European and US operations. The role centers on DLP (Data Loss Prevention) alert operations and first-line incident investigation, working closely with senior team members and overseas business, IT, Legal, and HR counterparts to safeguard overseas data assets. What you'll do DLP Alert Operations Receive, triage, and dispatch DLP alerts from the Europe and US regions; close alerts per established SOPs Maintain the DLP policy and rule library; identify false positives / negatives and propose tuning improvements Support rollout of data classification and grading policies in European and US office environments Initial Incident Investigation Conduct preliminary review of DLP alerts, including evidence collection, employee interviews, and initial risk assessment Support senior engineers in traceback analysis and impact assessment for incidents such as data leakage, unauthorized outbound transfer, and unauthorized access Execute incident tiering and handling SOPs at the first-line level Assist in emergency response and remediation follow-up Cross-functional Collaboration Coordinate with overseas business, IT, HR, and Legal teams to drive incident closure Support delivery of information security awareness training for Europe and US employees Participate in localization of overseas data-protection workflows (e.g., GDPR, CCPA) What we seek Foundational understanding of office network and endpoint security architecture Familiarity with DLP alert operations; basic awareness of UEBA and audit log concepts Basic log query and incident investigation skills English as a working language; strong written and verbal communication for emails, documents, and cross-border team interactions Open to occasional overseas business travel Chinese communication skill — strong plus. The role collaborates closely with the Shenzhen HQ and Hong Kong teams on a regular basis What you'll need Bachelor's degree or above in Information Security, Cybersecurity, Computer Science, or a related field 0–2 years of experience in information security / data security; fresh graduates are welcome Hands-on or internship experience with DLP, endpoint security, or email security products is a plus Information security certifications such as CISA or CISSP