IT Security Engineer - Financial Services

Our client is a well-established international financial services organisation with a strong presence across Asia and key global markets. As part of its continued investment in cybersecurity, the company is seeking an IT Security Engineer to join its regional security team in Hong Kong.

This is an excellent opportunity for a security professional who is passionate about cyber defence, emerging technologies, and building secure enterprise environments. You will work alongside experienced security specialists in a highly technical and collaborative setting, supporting both operational security and strategic cybersecurity initiatives.

Key Responsibilities

• Monitor, investigate, and respond to security alerts and potential cyber threats.
• Provide day-to-day operational support for security platforms and controls.
• Work closely with technology teams and business stakeholders to address security requirements and risks.
• Act as a technical point of contact for assigned security technologies.
• Evaluate new systems, solutions, and projects from an information security perspective.
• Participate in the design, implementation, and enhancement of cybersecurity programmes and initiatives.
• Support security incident handling, risk reviews, and remediation activities.
• Contribute to security process improvement and automation initiatives.

Requirements

• Experience working in an information security, cybersecurity, or infrastructure security role.

• Solid understanding of core security concepts, frameworks, and industry best practices.

• Knowledge of current cyber threats, vulnerabilities, attack techniques, and defensive measures.

• Experience with security monitoring and event management technologies (SIEM).

• Exposure to risk assessments, security reviews, or control evaluations.

• Familiarity with scripting or automation tools for operational efficiency.

• Understanding of vulnerability management and security testing methodologies.

• Strong foundation in Windows platforms, network technologies, and database fundamentals.

• Hands-on exposure to security technologies such as:

  • Endpoint protection solutions
  • Malware and antivirus platforms
  • Data loss prevention (DLP)
  • Web security and content filtering
  • DDoS protection technologies
  • Threat detection and monitoring tools