Infrastructure Security Engineer – Financial Services Group (Up to 50kpm)

About the role

Reporting to the Infrastructure Security Head, you will serve as a core technical defender within our 1st Line of Defense. This is a hands-on technical role focused on operating security controls, managing cloud and network baselines, and executing real-time threat detection and incident response across our hybrid infrastructure.

Key responsibilities

• Monitor, maintain, and tune security systems, including Next-Gen Firewalls (NGFW), WAF, EDR, SIEM, IAM, and vulnerability scanners
• Maintain baseline security configurations for hybrid cloud environments (AWS/GCP/AliCloud) and high-frequency trading network infrastructure
• Act as the primary technical responder for security alerts, conducting initial triage, log analysis, containment, and root-cause analysis
• Perform routine system scans, prioritize vulnerabilities based on risk, and coordinate directly with IT and DevOps teams for timely patching
• Script routine security tasks and enforce system hardening best practices across servers, endpoints, and cloud workloads

About you

• 3–5 years experience in infrastructure security, network defense, or SecOps within financial services, brokerage, or fintech
• Strong hands-on proficiency with firewalls, Linux/Windows security, Active Directory, AWS/GCP security, and SIEM/EDR platforms
• Preferred certifications: CompTIA Security+, CEH, CCNA Security, AWS Certified Security Specialist, or GIAC certifications
• Proactive, highly analytical, and comfortable working in a fast-paced live production trading environment
• Proficiency in English and Cantonese/Mandarin