We are looking for a highly motivated and experienced Network Security Engineer for our Global investment banking client. This critical role involves safeguarding the network infrastructure against emerging threats while ensuring compliance with industry regulations.
The successful candidate will work within the Global Network Security team and leverage their expertise to implement and manage security solutions that protect sensitive data and maintain the integrity of their network. You will play a key role in designing security architectures, improving existing systems, and collaborating with teams across multiple regions to ensure best practices in network security.
Responsibilities of the Role:
- Firewall Management
- Validate and process firewall configuration requests.
- Configure filtering software solutions for Intrusion Prevention Systems (IPS), Web Application Firewalls (WAF), and proxies.
- Enhance filtering policies to effectively detect and block unauthorized intrusions.
- Establish and maintain network security event monitoring systems.
- Actively monitor and respond to security alerts.
- Network Security Operations
- Manage daily network security operations, including ticket creation and handling via ServiceNow/SecOps.
- Continuously refine filtering policies to improve intrusion detection mechanisms.
- Oversee the configuration and operation of network security event monitoring systems.
- Security Architecture Design
- Conduct assessments of existing security architectures to identify strengths and weaknesses.
- Research and propose new security solutions that align with industry best practices.
- Review and validate security architectures proposed by other IT teams to ensure compliance and effectiveness.
- Provide expert guidance to IT teams on security best practices within your area of expertise.
- Vulnerability Management
- Perform comprehensive vulnerability assessments and manage the remediation process from detection to resolution.
- Configure and manage vulnerability scanning tools, such as Qualys, to identify security weaknesses.
Required Skills for the Role:
- Bachelor's degree in information technology, Computer Science or equivalent
- At least 5 years experience in network security roles.
- Ability to design and implement innovative security solutions.
- Strong collaborative skills with a proven experience of working effectively within diverse teams across multiple regions.
- Proficient with operating systems (Unix, Linux, Windows, Android/iOS).
- In-depth knowledge of network protocols (TCP/IP, routing, IPsec, VPN).
- Familiarity with vulnerabilities in internet application protocols (HTTP[S], SMTP, DNS, NTP, LDAP, SIP, SAMBA, SSH).
- Understanding of internet architecture definitions and vulnerability analysis tools.
- Knowledge of Security Information and Event Management (SIEM) solutions.
- Proficient in one or more programming or scripting languages (Python, JavaScript, C, C++, Assembler, Shell).
- Ability to adhere to local and global regulatory requirements, as well as internal data protection policies.
- Industry-recognized certifications such as CISM, CISA, CCSP, or equivalent information security credentials are highly preferred.
- Excellent English communication skills
If you are passionate about network security and eager to make a significant impact in a global financial institution, we encourage you to apply for this exciting opportunity!
"Sanderson-iKas" is the brand name for the following companies incorporated in Hong Kong: Sanderson Solutions International (Hong Kong) Limited (Business Registration no.53741924) and iKas International (Asia) Limited (Business Registration no.39818987)
Website: www.sanderson-ikas.hk
