Senior Product Security Engineer

Tribus Hong Kong
Full time Permanent On-site HK$2m - HK$3m

About the job

Product Security Engineer

Company Overview

A global, technology-driven organisation is seeking a Product Security Engineer to join its security function. The business operates a complex engineering environment spanning cloud platforms, business applications, and core infrastructure.

Role Summary

You will work closely with Software Engineering and Infrastructure teams to embed security into the design, development, and operation of production systems .

This is a hands-on engineering-focused security role covering application security, cloud security, secure software development, and infrastructure security across Windows and Linux environments.

Key Responsibilities

  1. Implement and operate security controls across cloud services, infrastructure, and business applications
  2. Partner with engineering teams to embed security into system design and software development
  3. Support secure development across languages including Python, C++, Rust, Go, Kotlin, and Java
  4. Conduct threat modelling, vulnerability assessments, and security code reviews
  5. Integrate security tooling including SAST, DAST, and dependency scanning into CI/CD pipelines
  6. Identify security risks and work with engineers on practical remediation strategies
  7. Conduct third-party and vendor security reviews
  8. Develop and share product security knowledge across engineering teams

Required Experience

  1. 5+ years' experience across Product Security, Application Security, Software Engineering , or a related technical security role
  2. Hands-on programming experience in at least one of Python, C++, Rust, Go, Kotlin, or Java
  3. Strong understanding of secure software development and common application vulnerabilities
  4. Technical foundation across software engineering, systems, or infrastructure
  5. Windows and/or Linux security experience
  6. AWS or Azure experience, ideally within hybrid environments
  7. Familiarity with threat modelling, vulnerability management, and security risk assessment
  8. Experience with security scanning and integrating security controls into CI/CD
  9. Strong problem-solving and communication skills

Desirable Experience

  1. Low-latency or performance-sensitive systems
  2. Large-scale, technically complex production environments
  3. Financial technology, trading, or other highly technical engineering environments