Security Engineer

About the role

Amber Group is seeking a dedicated Security Engineer to join our dynamic team in Hong Kong. This position is crucial for safeguarding our digital assets and ensuring the integrity of our systems. As a Security Engineer, you will be responsible for identifying vulnerabilities, implementing security measures, and responding to incidents. Your expertise will help us maintain a secure environment for our clients and stakeholders, allowing us to continue our mission of providing top-tier financial services.

Key facts

What you'll do

• Conduct comprehensive security assessments to identify vulnerabilities in our systems and applications, ensuring proactive measures are taken to mitigate risks.
• Develop, implement, and maintain security policies, standards, and procedures to protect sensitive data and comply with regulatory requirements.
• Collaborate with cross-functional teams to integrate security best practices into the software development lifecycle, enhancing the security posture of our products.
• Monitor security alerts and incidents, responding swiftly to potential threats and breaches to minimize impact.
• Perform regular penetration testing and vulnerability assessments to evaluate the effectiveness of security controls and identify areas for improvement.
• Stay up-to-date with the latest security trends, threats, and technologies to ensure our security strategies remain effective and relevant.
• Provide training and awareness programs for employees to promote a culture of security within the organization.
• Assist in the development of incident response plans and conduct post-incident reviews to learn from security events and improve future responses.
• Work closely with external vendors and partners to evaluate and implement security solutions that align with our business objectives.
• Document security incidents and responses, maintaining accurate records for compliance and audit purposes.
• Participate in security audits and assessments conducted by internal and external parties, ensuring adherence to industry standards.
• Contribute to the continuous improvement of our security infrastructure through innovative solutions and proactive risk management strategies.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• A minimum of 3 years of experience in a security engineering or related role, preferably within the financial services sector.
• Strong understanding of security frameworks and standards such as ISO 27001, NIST, or CIS.
• Proficiency in security tools and technologies, including firewalls, intrusion detection systems, and endpoint protection solutions.
• Experience with cloud security, particularly in environments such as AWS, Azure, or Google Cloud Platform.
• Familiarity with programming and scripting languages such as Python, Java, or Bash for automation and security tool development.
• Excellent analytical and problem-solving skills, with the ability to think critically under pressure.
• Strong communication skills, both written and verbal, to effectively convey security concepts to technical and non-technical stakeholders.
• Relevant security certifications such as CISSP, CISM, CEH, or equivalent are highly desirable.

Nice to have

• Experience with security operations center (SOC) processes and incident response methodologies.
• Knowledge of regulatory compliance requirements specific to the financial industry, such as PCI-DSS or GDPR.
• Familiarity with DevSecOps practices and tools to integrate security into the CI/CD pipeline.
• Experience with threat hunting and intelligence analysis to proactively identify and mitigate risks.
• Understanding of blockchain technology and its security implications in the financial sector.

Skills & tools

• Security Information and Event Management (SIEM) tools
• Vulnerability assessment and penetration testing tools
• Network security protocols and technologies
• Incident response and forensics tools
• Cloud security solutions
• Programming and scripting languages (Python, Java, Bash)

Practical notes

• This position is based in Hong Kong, and candidates must be willing to work in a fast-paced, collaborative environment.
• Amber Group values diversity and inclusion, and we encourage applications from individuals of all backgrounds.
• The role may require occasional on-call support for incident response outside of regular working hours.
• Candidates must be eligible to work in Hong Kong; visa sponsorship is available for qualified applicants.

META

Company: Amber Group

Title: Security Engineer

Listed

location: Hong Kong, Hong Kong

Job type: Full-time

Apply URL: https://ambergroup.bamboohr.com/careers/34

Tags: Security, Engineering