Total 6 quality control engineer job vacancies in Legal / Public / Security category in Hong Kong, Causeway Bay

Our client a Commercial bank is looking to hire IT Security Engineer.

Responsibilities:

• To support the team to conduct regular security assessment, e.g. regular security scanning, handling SPAM/Phishing incident, etc.
• To support and follow up the TVM process.
• To support the new security related project team's administration and documents tasks, such as IAM, Cloud Adoption, STDB, etc.
• To support implementing the iCAST remediation and new CNCB and Regulatory Requirement
• To support the new security BAU tasks for new projects, such as SIP & XDR, Firewall Management Utility, etc.
• To support the enhancement on security tools, such as security scanning automations, PAMS script integrations, SIEM correlation rules, etc.

Requirements

A)   Knowledge, Skill & Attributes

• Hands on experiences on IT security tools or applications.
• Knowledge of the DevSecOps or similar agile development
• Experiences on HK FSI, banking industry is preferred.
• Basic communications with English and Mandarin
• Following security best practices in performing tasks

B)   Academic and Professional Qualification

• Degree holder (or above) which is related to Information Technology
• Fulfill HKMA ECF is preferable

C)   Training and Relevant Experiences

• Fresh graduation or 1-2 years experiences on HK FSI, banking industry is preferred.
• Basic knowledge on software programming
• Basic knowledge on networking

D)   Experiences on Application/Development Security is an advantage, i.e.

• Developing and maintaining software application security policies and procedures
• Developing and maintaining documentation of application security controls
• Implementing software application security controls
• Designing technical solutions to address security weaknesses
• Analyzing system services, spotting issues in code, networks and applications

Hex Trust is a fully-licensed and insured digital asset custodian led by veteran banking technologists and award-winning financial services experts. Hex Trust has built Hex Safe, a proprietary bank-grade platform that delivers solutions for digital asset protocols, foundations, financial institutions, and the Web3 ecosystem. Hex Trust has offices in Singapore, Hong Kong, Dubai, Italy, and Vietnam.

Position Summary

As Hex Trust is growing rapidly and looking to expand its business to multiple jurisdictions, we are looking for professionals in the security engineering  space to support our Information Security Team. You will be assisting the Company in several areas including Cloud Security, Application Security and Infrastructure Security. You are expected to have hands-on experience with some of the above domains. 

Duties & Responsibilities

• Assist on Implementing and operating different security solutions including CSPM, PAM, SIEM, EDR, HSM, Vulnerability management tool.
• Collaborate with Engineering, DevOps, Information Technology and Business teams to ensure alignment and buy-in to achieve our security vision and objectives.
• Assess current cybersecurity processes and propose improvements on the processes and P&P in order to have the highest overall cybersecurity standards against both external and internal hacks, fraud, or theft.
• Assist on IT and Security Certification including SOC1, SOC2, CSA  and provide evidence to support the audit process.
• Manage a variety of technical assessments including penetration tests, source code reviews, security posture reviews, purple teaming etc.
• Assist in responding to security solutions (SIEM, EDR, WAF, CSPM) alerts and appropriately respond and escalate the potential incidents to the correct teams.

Requirements

• Bachelor Degree in Computer Science, Information Systems, Cyber Security, Business Administration or relevant field.
• Strong communication skills to collaborate with various stakeholders in English.
• 2 to 5 years of work experience at least one of the below areas:
• DevOps / DevSecOps
• PAM, IAM
• CSPM, CWPP
• EDR
• HSM
• Penetration Test
  
• The following things would be beneficial but are not needed:
• Security certification holder / exam passer of any of these
• Cloud certifications
• CISSP
• OSCP
• OSEP
• CRTP
• CRTE
  
• Expertise in blockchain systems and blockchain security.
• Experience with modern cloud technologies, including:
• Kubernetes / containerization technology
• AWS / GCP  IaC deployments

Candidates who do not tick all the boxes are still encouraged to apply, those with less experience will still be considered for the position but with an adjustment to the level of seniority.

As one of the leading Web3 innovators, Hex Trust offers a front-row seat in the ever-changing blockchain & crypto industry. We genuinely believe that people are our greatest asset, and invest heavily so they’re best prepared to support our mission to unlock ownership in decentralized markets! You will be joining a company that is always committed to creating a supportive & inclusive environment that promotes personal and professional growth furthers your success and drives innovation, collaboration, and passion in the blockchain space.

At Hex Trust, we are proud of our R.A.P.I.D. culture:

• Respect and Inclusion
• Agile
• Passionate
• Indivisible
• Driven by integrity

Join us at Hex Trust and not only can you look forward to working with blockchain professionals to build the decentralized future, but also:

• Competitive Salaries & Bonuses
• Generous Amounts of Paid Time Off (incl. leave for Birthdays, Work Anniversary, and Mental Health etc.)
• Flexible Work Arrangements
• Access to Corporate Discounts and exclusive Employer Perks
• Medical & Retirement Plans
• Professional Learning and Development Opportunities
• Elevate your work using cutting-edge technology
• Fun & friendly office spaces in Hong Kong, Singapore, Dubai and Vietnam
• Regular company & social events

Hex Trust is an equal-opportunity employer devoted to diversity and inclusion in the workplace. We do not discriminate on the basis of race, religion, colour, national origin, gender, sexual orientation, age, marital status or disability status.

Our client a Large commercial bank is looking to hire IT Security Engineer.

Responsibilities:

• To support the team to conduct regular security assessment, e.g. regular security scanning, handling SPAM/Phishing incident, etc.

• To support and follow up the Threats & Vulnerability Management process.

• To support the new security related project team's administration and documents tasks, such as IAM, Cloud Adoption, STDB, etc.

• To support implementing the iCAST remediation and new CNCB and Regulatory Requirement

• To support the new security tasks for new projects initiatives, such as SIP & XDR antivirus management, Firewall Management Utility, etc.

• To support the enhancement on security tools, such as security scanning automations, PAMS script integrations, SIEM correlation rules, etc.
• As SME on Cybersecurity services to collaborate with application team for project scoping and delivery. 

• 2-3 year hands-on experiences on IT security tools and applications or software development

• Knowledge of the DevSecOps or similar agile development

• Experiences on HK FSI, banking industry is preferred

• Basic communications with English and Mandarin
• Following security best practices in performing tasks
• Degree holder (or above) which is related to Information Technology
• Fulfill HKMA ECF is preferable
• 1-2 years experiences on HK FSI, banking industry is preferred
• Basic knowledge on software programming and networking
• Sound knowledge on Software Development Life Cycle
• Developing and maintaining software application security policies and procedures
• Developing and maintaining documentation of application security controls
• Implementing software application security controls
• Designing technical solutions to address security weaknesses
• Analyzing system services, spotting issues in code, networks and applications

Hex Trust is a fully-licensed and insured digital asset custodian. Led by veteran banking technologists and award-winning financial services experts, Hex Trust has built Hex Safe, a proprietary bank-grade platform that delivers solutions for digital asset protocols, foundations, financial institutions, and the Web3 ecosystem. Hex Trust has offices in Singapore, Hong Kong, Dubai, Italy, and Vietnam.

Position Summary

Hex Trust Information Security Team is looking for a highly skilled and motivated Security Engineer to support the Security Team's engineering and operations. You are expected to have deep hands-on experience with at least some security domains, such as Cloud Security, Security Engineering, Infrastructure Security, Zero Trust architecture, Security Operations, On-premise Security, and Crypto Wallet Security with strong application background. 

Responsibilities

• Assist in Threat modeling and hunting in the company, and propose and implement mitigation strategies
• Implementation and operation  of  our security stack together with the rest of the team (DevSecOps, CSPM, CWPP, PAM, SIEM, EDR,  WAF, DLP, Vulnerability management tools )
• Propose improvements on the processes in order to have the highest overall cybersecurity standards against both external and internal hacks, fraud, or theft.
• Manage and perform a variety of technical assessments including penetration tests, source code reviews, security posture reviews, purple teaming etc.
• Participate in security incident management
• Evaluate our security vendors and partners
• Application security reviews
• Work with development teams to foster secure coding practices

• Experience working in DevOps / DevSecOps teams, understanding and working knowledge of tooling used by these teams (Terraform, CI/CD pipelines)
• Experience with PAM, IAM applications, knowledge of OpenID, OAuth2, PKI
• Experience with SaaS security tooling (CDNs, ng-WAFs, etc.)
• Experience working in Cloud Native environment (AWS, GCP)
• Experience with network security infrastructure (Web content filtering, Firewall, IDS and DLP controls)
• Advanced security knowledge of Cloud Native stack (Kubernetes, Containers, AWS, GCP)
• Scripting and automation experience (Terraform, Python, TypeScript, Bash, etc.)
• Application Penetration Testing, Application Security Reviews, Purple-teaming
• Incident Response management and investigations
• Operational familiarity with key management and HSM systems
• At least 1 years of experience in some of the above security domains 
• Cloud certifications, CISSP, OSCP, OSEP, CRTP, CRTE will be a plus
• Ability to influence others and work towards a common vision or goal
• You know what high quality secure environment looks like
• You are passionate about security
• You are interested in Blockchain and Crypto Currencies
• You are good communicator, able to explain complex security concepts

*We understand you may not check all the boxes, but would still like to hear from you on how you think you can contribute. 

As one of the leading Web3 innovators, Hex Trust offers a front-row seat in the ever-changing blockchain & crypto industry. We genuinely believe that people are our greatest asset, and invest heavily so they’re best prepared to support our mission to unlock ownership in decentralized markets! You will be joining a company that is always committed to creating a supportive & inclusive environment that promotes personal and professional growth that furthers your success and drives innovation, collaboration, and passion in the blockchain space.

At Hex Trust, we are proud of our R.A.P.I.D. culture:

• Respect and Inclusion
• Agile
• Passionate
• Indivisible
• Driven by integrity

Join us at Hex Trust and not only can you look forward to working with blockchain professionals to build the decentralized future, but also:

• Competitive Salaries & Bonuses
• Generous Amounts of Paid Time Off (incl. leave for Birthdays, Work Anniversary, and Mental Health etc.)
• Flexible Work Arrangements
• Access to Corporate Discounts and exclusive Employer Perks
• Medical & Retirement Plans
• Professional Learning and Development Opportunities
• Elevate your work using cutting-edge technology
• Fun & friendly office spaces in Hong Kong, Singapore, Dubai and Vietnam
• Regular company & social events

Hex Trust is an equal-opportunity employer devoted to diversity and inclusion in the workplace. We do not discriminate on the basis of race, religion, colour, national origin, gender, sexual orientation, age, marital status or disability status.