IT Security Engineer

• Fintech
• Innovative project
• Leading digital transformation project

We are seeking a hands-on Senior Cybersecurity Engineer to join a leading investment firm based in Hong Kong. This role will work closely with the Cybersecurity Manager, Raymond Shum, to evaluate, implement, and onboard enterprise security solutions across the organization.
The position combines security engineering and operational responsibilities, with approximately 70% focused on project delivery, security solution implementation, and Proof of Concepts (POCs), and 30% focused on security operations, monitoring, and incident management.
You will be part of a lean cybersecurity team in Hong Kong, partnering closely with cloud engineering resources and regional stakeholders.
Key Responsibilities Security Engineering (70%)

• Partner with the Cybersecurity Manager to evaluate new technologies and develop security Proof of Concepts (POCs).
• Lead the implementation, configuration, testing, and onboarding of cybersecurity solutions.
• Design and deploy security controls across cloud and on-premises environments.
• Drive cybersecurity projects from planning through production rollout.
• Collaborate with infrastructure, cloud, and application teams to ensure secure implementation of solutions.
• Produce technical documentation, implementation guides, and operational procedures.

Security Operations (30%)

• Monitor and respond to security alerts and incidents, particularly during APAC business hours before offshore teams come online.
• Manage and support security technologies including web proxy, threat prevention, and application control platforms.
• Perform application whitelisting administration and policy management.
• Investigate and remediate security events related to Zscaler and other security platforms.
• Support ongoing security monitoring, compliance, and operational improvements.

Key Projects The successful candidate will be involved in a variety of strategic security initiatives, including:

• Database Security Solutions
• Email Security Gateways
• Data Loss Prevention (DLP)
• Browser/PC Isolation Projects

Required Qualifications Must-Have Skills

• 5+ years of cybersecurity engineering experience.
• Proven experience leading or participating in security solution implementations and Proof of Concepts (POCs).
• Strong hands-on experience configuring and deploying enterprise security technologies.
• Experience with security incident investigation and operational support.
• Knowledge of network security, endpoint security, and security architecture principles.
• Ability to manage projects and work independently in a fast-paced environment.

Preferred Skills

• Experience with:
  • Zscaler
  • DLP solutions
  • Email security gateways
  • Database security technologies
  • Application whitelisting solutions
  • Browser/PC isolation technologies
• Exposure to cloud environments such as AWS, Azure, and Alibaba Cloud.
• Mandarin language skills are highly preferred, as the role may involve communication with stakeholders at the Beijing headquarters.

Personal Attributes

• Hands-on and technically strong cybersecurity professional.
• Strong problem-solving and troubleshooting skills.
• Ability to work closely with business and technical stakeholders.
• Self-motivated with a proactive mindset.
• Excellent communication and documentation abilities.