About this role

Assist in managing the IT security agenda across clients, which includes strict requirements around Data protection, Access, and Resiliency.
Help manage regular client audits and surveys by reviewing controls in place.
Be a key resource for addressing client inquiries related to IT security and conducting client-facing reviews.
Liaise with the internal DevOps, Infrastructure, and Analyst teams to provide the right answers and evidence for client requests.
Actively help to implement security practices and controls across the company internally.
Work with the DevOps team to design and implement security practices specifically for the company's AWS application.
Identify required changes if any security gap is identified and prioritize/design the changes with the DevOps team and the developers.

Academics and experience:

Background as developer or infrastructure engineer , with exposure to network controls / gateways / firewalls
Similar role in the candidate existing position (Security or Network Analyst)

Key Skills:

Strong IT Foundation: Possess a deep understanding of core IT concepts, including network protocols, database management, and microservices architecture.
Advanced Security Knowledge: Demonstrate very strong awareness and hands-on experience with key security topics such as gateways, firewalls, cloud computing, authentication methods (OAuth, certificates), encryption, and modern cybersecurity practices.
Cloud Infrastructure Experience: Proven experience working in a cloud environment, with a strong preference for Amazon Web Services (AWS).
Hands-On Operational Skills: Ability to operate and utilize monitoring tools like Grafana for security analysis and incident response.
Secure Software Development Lifecycle (SDLC): Excellent understanding of the SDLC, including experience with Agile methodologies and various testing frameworks to ensure security is embedded throughout the development process.
Excellent Communication: Superior verbal and written communication skills, with fluency in English.
Thorough Documentation: A proven ability to create clear, concise, and comprehensive documentation for security processes and systems.
Strong Interpersonal Skills: Exhibit strong analytical, problem-solving, and organizational skills, coupled with a proactive and driven attitude.
Knowledge of Financial markets is not required
This is a full-time position based in Hong Kong, Central.

Infrastructure Security Analyst