Skip to content

Open nowPosted 15 days ago

Security Engineer

XREX5 open roles

Where
Taipei, Taiwan
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSecurity EngineerXREX · Taipei, Taiwan
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on XREX's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.3% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.1%1 day
  2. 4.6%3 days
  3. 13.3%7 days
  4. 21.3%14 days
  5. 35.7%30 days
  6. 59.1%60 days
This job: posted 15 days ago

The posting

About

Want to build a worldwide brand from Taiwan, and to communicate our brand story to millions of users worldwide? Want to be based in Taiwan but work in a silicon-valley-like environment, and to build world-class brand and products? Want to participate in the global fintech and blockchain movement, and work at an English-speaking workplace? Come change the world with us! Join this fast-growing startup founded by software veterans and funded by top VCs, Skype co-founders, and the Taiwanese government (NDF)! We’re hiring for an experienced Security Engineer. The exact mix of other skills does not matter, so long as your tool chest includes a mix of abilities. Be willing to attack anything that comes your way, learn on the fly and get things done. Come talk to us if you want to push your skillset in a dynamic fast-paced environment.

Responsibilities

1. Information Security Policy & Procedure Design - Assist in drafting and maintaining information security policies, standards, and standard operating procedures (SOPs), ensuring alignment between policy design and actual operations. - Regularly review the effectiveness of security controls and make adjustments based on operational needs or regulatory changes.

2. Control Effectiveness Assessment & Process Support - Conduct risk assessments and provide recommendations for control design within the company's IT processes (e.g., access control, change management, backup/redundancy). - Support related departments in enhancing the maturity of security controls embedded in their workflows.

3. Audit Coordination & Documentation - Act as the point of contact for internal audits, external audits, and regulatory inspections, providing required documentation and process explanations. - Prepare and organize supporting documents such as control narratives, process flowcharts, and audit workpapers.

4. Security Compliance & Regulatory Support - Analyze whether the company's information practices comply with relevant laws (e.g., Cyber Security Management Act, Personal Data Protection Act, GDPR) and industry standards (e.g., ISO, NIST). - Support the integration of security policies with compliance requirements, and provide implementation guidance and training resources to departments.

5. Security Awareness & Policy Promotion - Plan and execute activities to raise cybersecurity awareness, including training programs, internal presentations, and online course content. - Promote information security policies and processes to ensure effective implementation across the organization.

Requirements - Bachelor’s degree in Information Security, Computer Science, IT Management, Risk Management, or related fields

- 3–5 years of experience in information security, with both policy writing and audit experience

- Familiar with frameworks like ISO 27001, CIS Controls, or MAS TRM

- Able to review IT processes, design controls, and write security policies and SOPs

- Experience supporting internal/external audits or regulatory checks

- Able to track and report on audit findings and improvement plans

Preferred Traits - Good understanding of how to turn regulations into practical rules and workflows

- Able to work independently and coordinate across departments

- Strong writing and documentation skills

- Compliance-minded and aware of how security affects business and reputation

- Detail-oriented, good at identifying key risks and control points

Nice to Have - Certifications such as CISA, CISM, or ISO 27001 LA/LI

- Experience in cross-team projects or process reviews

- Familiarity with financial industry audits

- Experience leading security policy implementation independently

Location: Taipei (check us out on Google Maps!)

About XREX

Regarding our culture

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against XREX's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on XREX's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    XREX's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.