Shopee | Cybersecurity Engineer (Reverse Engineering) - Information Security

Department: Engineering and Technology Level: Experienced (Individual Contributor) The Engineering and Technology team is at the core of the Shopee platform development. The team is made up of a group of passionate engineers from all over the world, striving to build the best systems with the most suitable technologies. Our engineers do not merely solve problems at hand; they build foundations for a long-lasting future. We don't limit ourselves on what we can or can't do; we take matters into our own hands even if it means drilling down to the bottom layer of the computing platform. Shopee's hyper-growing business scale has transformed most 'innocent' problems into huge technical challenges, and there is no better place to experience it first-hand if you love technologies as much as we do. Job Description: Design and develop the red team's customized secure system (remote control program), and ensure that the endpoint protection can be bypassed such as Crowdstrike, Windows Defender, 360 Safeguard. Reverse analysis of common EDR and HIDS to identify methods for bypassing detection, and embed security principles into the design of system architectures to mitigate the risks. Research the persistence solutions under common operating systems such as Windows, MacOS, and Linux. Perform red team engagements related to the periodic review and audit activities of infrastructure security systems (IDC network, office environment, cloud native) and maintain documentation of security standards and procedures. Requirements: Minimum 3 years of relevant work experience. Extensive experience in RAT (Remote Access Tool) development, with the ability to customize attack frameworks like Cobalt Strike. Extensive experience in anti-endpoint protection, providing solutions to bypass the detection of EDR such as CrowdStrike, Windows Defender, 360 Safeguard. Experience in persistence solutions under common operating systems (Windows, MacOS, Linux). In-depth understanding of security mechanisms of Windows/Linux systems, and familiar with offensive techniques in ring0/ring3. Strong reverse engineering skills with proficiency in tools such as IDA Pro, OllyDBG, WinDBG, GDB, etc. Strong communication skills and effective teamwork spirit. Self-starter and fast learning ability. #J-18808-Ljbffr