Infrastructure Security Engineer (1st Line of Defense) – Financial Services Group

About the Role

Reporting to the Infrastructure Security Head, you will serve as a core technical defender within our 1st Line of Defense. This is a hands-on technical role focused on operating security controls, managing cloud and network baselines, and executing real-time threat detection and incident response across our hybrid infrastructure.

Key Responsibilities

• Daily Security Operations: Monitor, maintain, and tune security systems, including Next-Gen Firewalls (NGFW), WAF, EDR, SIEM, IAM, and vulnerability scanners.

• Cloud & Network Defense: Maintain baseline security configurations for hybrid cloud environments (AWS/GCP/AliCloud) and high-frequency trading network infrastructure.

• Incident Response & Triage: Act as the primary technical responder for security alerts, conducting initial triage, log analysis, containment, and root-cause analysis.

• Vulnerability Management: Perform routine system scans, prioritize vulnerabilities based on risk, and coordinate directly with IT and DevOps teams for timely patching.

• Automation & Hardening: Script routine security tasks and enforce system hardening best practices across servers, endpoints, and cloud workloads.

Key Requirements

• Experience: 3–5 years in infrastructure security, network defense, or SecOps within financial services, brokerage, or fintech.

• Technical Stack: Strong hands-on proficiency with firewalls, Linux/Windows security, Active Directory, AWS/GCP security, and SIEM/EDR platforms.

• Certifications (Preferred): CompTIA Security+, CEH, CCNA Security, AWS Certified Security Specialist, or GIAC certifications.

• Mindset: Proactive, highly analytical, and comfortable working in a fast-paced live production trading environment.

• Languages: Proficiency in English and Cantonese/Mandarin.