Job Opportunities API

ABOUT US As Southeast Asia’s #1 integrated logistics provider, Teleport is all about making logistics fast, affordable and reliable.  Our mission? To move things across Southeast Asia better than anyone else. We’re focused on making next-day delivery a reality for all. #TeamTeleport is guided by our values: Move with urgency — because time is crucial; Aim to pioneer — constantly innovating to stay ahead; Do it with intent — delivering with purpose and precision; and Keep it real — maintaining authenticity and transparency in all we do. Learn more about Teleport here: https://www.teleport.it/   A DAY IN A LIFE At Teleport, we’re building toward IPO — and that means doing the boring things well. Execution, discipline, and follow-through matter as much as big ideas. Your day will be varied, often crossing functions, but most of your time will focus on delivering results, owning your scope end-to-end, making fast, data-informed decisions, and following through on fundamentals like reporting, documentation, and processes. How we work matters as much as what we achieve. Doing the basics right, every time, sets us up for success.  Role Overview As a Security Architect , you will be responsible for defining and governing our enterprise security framework across a multi-cloud environment spanning GCP and Tencent Cloud . This role focuses on security architecture, regulatory compliance, proactive monitoring design, and audit readiness , rather than day-to-day cloud operations. You will guide engineering and infrastructure teams on what must be built and why , ensuring security controls align with ISO 27001 and regional regulatory requirements across China and South-East Asia . You will act as the bridge between compliance, security design, and engineering execution , ensuring security is embedded into platforms and applications by default. Key Responsibilities 1. Proactive Security Monitoring & Threat Governance (Top Priority) Define a centralized security monitoring and alerting architecture across GCP, Tencent Cloud, and Cloudflare. Specify log sources, retention policies, and alerting standards to ensure real-time visibility into security events. Design threat detection use cases and “tripwires” , such as: Unauthorized MongoDB data access or exports Brute-force or abuse patterns on Java/Spring Boot APIs Privileged access or IAM changes in Tencent Cloud Work with DevOps and SRE teams to ensure monitoring controls are implemented, tested, and continuously improved . 2. Security Architecture & Standards Define and document security architecture blueprints and policies for applications and platforms operating across multiple regions. Establish identity, access control, and network isolation standards , ensuring least-privilege and segregation of duties. Define data protection requirements , including encryption at rest and in transit, secure key management, and access auditing for MongoDB. Specify defense-in-depth requirements , including expectations for Cloudflare (WAF, Zero Trust, DDoS) and application-level security controls. Review solution designs and provide security sign-off for new initiatives and major changes. 3. Secure SDLC & Vulnerability Management Define security requirements for Secure SDLC , including SAST/DAST expectations within CI/CD pipelines. Establish vulnerability severity criteria and remediation SLAs aligned with risk and regulatory impact. Ensure application security standards address OWASP Top 10 risks for Java/Spring Boot services. Partner with engineering teams to ensure security findings are tracked, resolved, and verified. 4. ISO 27001 & Regulatory Compliance (Core Focus) Lead the technical interpretation and implementation of ISO 27001 controls , acting as the primary security architecture point of contact. Translate regulatory requirements into practical