Information Security Engineer (Europe and US Region)
Lalamove is disrupting the logistics industry by connecting customers and drivers directly through our technology. We offer customers a lightning fast and convenient way to book delivery and moving services whether they are at their home, at work or on the go. People talk about O2O, we live it!
Currently, Lalamove is a leading global on-demand delivery platform with millions of delivery partners serving millions of orders everyday. With 1600+ employees spread across SEA and LATAM, our 10-year old company has reached unicorn status in 2018, is well funded by prominent VCs and has kept growing at tremendous speed since.
Our strength lies in our internal values, namely Passion in serving local communities, empowering SMEs and our driver partners, Execution and Grit because that is how we differentiate ourselves by never giving up and striving for excellence, and Humility - awareness in ourselves to learn from others and never stop improving.
At Lalamove, we strongly believe in the power of community. Millions of drivers and customers use our technology every day to connect with one another and move things that matter. Delivery is what we do best and we ensure it is always fast and simple. Since 2013, we have tackled the logistics industry head on to find the most innovative solutions for the world’s delivery needs. Our vision is to bring communities closer and make city life easier by allowing fast and convenient circulation of goods. We realize this vision with a ‘glocal’ approach, building a robust operations team to adapt our product to local networks of businesses and delivery contractors. At the same time, we have ambition to build an international brand by establishing an even more global presence.
We are hiring a Junior Information Security Engineer to support day-to-day security incident monitoring and handling across our European and US operations. The role centers on DLP (Data Loss Prevention) alert operations and first-line incident investigation, working closely with senior team members and overseas business, IT, Legal, and HR counterparts to safeguard overseas data assets.
What you'll do DLP Alert Operations
Receive, triage, and dispatch DLP alerts from the Europe and US regions; close alerts per established SOPs
Maintain the DLP policy and rule library; identify false positives / negatives and propose tuning improvements
Support rollout of data classification and grading policies in European and US office environments
Initial Incident Investigation
Conduct preliminary review of DLP alerts, including evidence collection, employee interviews, and initial risk assessment
Support senior engineers in traceback analysis and impact assessment for incidents such as data leakage, unauthorized outbound transfer, and unauthorized access
Execute incident tiering and handling SOPs at the first-line level
Assist in emergency response and remediation follow-up
Cross-functional Collaboration
Coordinate with overseas business, IT, HR, and Legal teams to drive incident closure
Support delivery of information security awareness training for Europe and US employees
Participate in localization of overseas data-protection workflows (e.g., GDPR, CCPA)
What we seek Foundational understanding of office network and endpoint security architecture
Familiarity with DLP alert operations; basic awareness of UEBA and audit log concepts
Basic log query and incident investigation skills
English as a working language; strong written and verbal communication for emails, documents, and cross-border team interactions
Open to occasional overseas business travel
Chinese communication skill — strong plus. The role collaborates closely with the Shenzhen HQ and Hong Kong teams on a regular basis
What you'll need Bachelor's degree or above in Information Security, Cybersecurity, Computer Science, or a related field
0–2 years of experience in information security / data security; fresh graduates are welcome
Hands-on or internship experience with DLP, endpoint security, or email security products is a plus
Information security certifications such as CISA or CISSP