Senior Cyber Security Architect for Global Exchange

5 days ago

Hong Kong, Central and Western District, Hong Kong SAR China Hong Kong Exchanges and Clearing Limited Full time

About Us: Hong Kong Exchanges and Clearing Limited is home to Asia's most dynamic and vibrant capital markets, connecting capital, ideas, inspiration, and innovation for deeper, more diverse, and liquid global capital markets. We provide greater choice and opportunity for our customers every day.

Our Purpose: To connect, promote, and progress our markets and the communities they support for the prosperity of all.

About the Role: The Application Security Solution Architect will be accountable for translating group-wide information and cyber security strategy, policy, and control requirements into secure application solutions. They will focus on application-level security architecture, design, processes, and controls, ensuring that applications are engineered according to specifications and within acceptable risk tolerance levels.

Key Responsibilities:

  • Architectural Oversight: Ensure that the information and cybersecurity architecture and solution designs for applications are engineered according to specifications and within acceptable risk tolerance levels, focusing on application-specific contexts.
  • Support Development Teams: Collaborate with development teams to implement application-specific threat modeling, secure coding practices, and the effective use of application security assurance tools to enhance the security of software products.
  • Integration Architecture Recommendations: Provide expert recommendations on application-level integration architecture, focusing on secure coding practices, web application firewalls, software composition analysis, static and dynamic code scanning, Software Bill of Materials (SBOM), and security measures within CI/CD pipelines.
  • Application Security Assurance Tool Experience: Leverage experience with application security assurance tools, including onboarding, triaging issues, and assisting developers, to ensure that applications are built and maintained with robust security measures.
  • Collaboration with Security Engineering: Work closely with the Security Engineering team to integrate security solutions into application development processes, ensuring that security is a fundamental aspect of the application lifecycle.
  • Requirement Creation and Review: Develop and review functional and non-functional security requirements specifically tailored for application projects, ensuring these requirements enhance the security posture of applications.
  • System Architecture Review: Conduct thorough reviews of application architecture and designs to ensure that all solutions have undergone appropriate security assurance and meet established security acceptance criteria.
  • Security Reference Patterns Development: Create and present application security reference patterns and technical security standards that guide secure application development, ensuring compliance with the Information Security Policy.
  • Data Security: Create or review implementation of data layer protective and detective control patterns for data storage technologies.
  • Kubernetes / Cloud Security Expertise: Apply knowledge of Kubernetes / Cloud security technologies to enhance the security of applications deployed in containerized environments.
  • Application Architecture Understanding: Demonstrate a comprehensive understanding of application architecture to apply relevant security controls and systems, minimizing cybersecurity risks specific to the application's design and functionality.

Requirements:

  • A relevant University degree in Computer Science, Information Management, or related field, or equivalent experience.
  • Relevant experience with information security and enterprise architecture methods and frameworks.
  • Cyber Security certifications, such as SABSA, CCSP (Certified Cloud Security Professional), CISSP (Certified Information Systems Security Professional).
  • Significant and wide experience in the information and cyber security industry.
  • Subject matter expertise in application threat modelling, secure coding practices, and DevSecOps practices.

  • Cyber Security Architect

    5 days ago

    Hong Kong, Central and Western District, Hong Kong SAR China Check Point Software Technologies Ltd. Full time

    About the Role: We are seeking a highly skilled and experienced Cyber Security Architect to join our team at Check Point Software Technologies Ltd.">We are looking for a Technical Solutions Specialist who can drive innovative Programs and Strategies focused on Technical Engagements, providing expert guidance to advance our business across Greater China. Your...

  • Senior Cyber Security Engineer

    2 weeks ago

    Hong Kong, Central and Western District, Hong Kong SAR China BIXIN Full time

    Company Overview: NewBX is a deemed-to-be-licensed VASP regulated by the Securities and Futures Commission (SFC) of Hong Kong.Job Description:Multiple opportunities with each distinct in cybersecurity domains: security operations, application security, cyber risk & compliance, threat hunting & intelligence, access control, blockchain security,...

  • Senior Cyber Security Expert

    3 days ago

    Hong Kong, Central and Western District, Hong Kong SAR China Wizlynx Malaysia Sdn Bhd Full time

    Senior Cyber Security RoleWe are looking for a skilled (Senior) Cyber Security Consultant & Penetration Tester to join our team at Wizlynx Malaysia Sdn Bhd. As a penetration tester, you will execute various engagements, conducting advanced hands-on penetration testing beyond automated tool validation, focusing on targets such as network devices, servers, web...

  • Cyber Security Consultant

    1 week ago

    Hong Kong, Central and Western District, Hong Kong SAR China Wizlynx Malaysia Sdn Bhd Full time

    (Senior) Cyber Security Consultant & Penetration TesterLocation: Hong KongKey RoleAs (Senior) Cyber Security Consultant & Penetration Tester, you will execute a variety of engagements, conducting advanced hands-on penetration testing beyond automated tool validation, which will focus on targets that may include network devices, servers, web and mobile apps,...

  • Cyber Security Consultant

    3 days ago

    Hong Kong, Central and Western District, Hong Kong SAR China Wizlynx Malaysia Sdn Bhd Full time

    (Senior) Cyber Security Consultant & Penetration Tester Location: Hong Kong Key Role As (Senior) Cyber Security Consultant & Penetration Tester, you will execute a variety of engagements, conducting advanced hands-on penetration testing beyond automated tool validation, which will focus on targets that may include network devices, servers, web and mobile...

  • Cyber Security Professional

    3 days ago

    Hong Kong, Central and Western District, Hong Kong SAR China Wizlynx Malaysia Sdn Bhd Full time

    Cyber Security PositionAt Wizlynx Malaysia Sdn Bhd, we are seeking a talented (Senior) Cyber Security Consultant & Penetration Tester to join our team. In this role, you will conduct advanced hands-on penetration testing beyond automated tool validation, targeting various systems such as network devices, servers, web and mobile apps, web APIs, wireless...

  • Global Cyber Security Threat and Vulnerability Manager

    6 days ago

    Hong Kong, Central and Western District, Hong Kong SAR China MUFG Full time

    We are a global financial group with a strong commitment to innovation, collaboration, and customer satisfaction.We are seeking a highly skilled Cyber Security Threat and Vulnerability Specialist to join our team. As a member of our global cybersecurity team, you will play a critical role in protecting our organization from emerging threats and...

  • Cyber Security Expert

    7 days ago

    Hong Kong, Central and Western District, Hong Kong SAR China Wizlynx Malaysia Sdn Bhd Full time

    Job DescriptionWe are seeking a highly skilled Cyber Security Expert to join our team. As a Cyber Security Consultant & Penetration Tester, you will execute various engagements, conducting advanced hands-on penetration testing beyond automated tool validation. You will have the opportunity to combine technical expertise with your imagination to conduct...

  • Cyber Security Engineer

    3 days ago

    Hong Kong, Central and Western District, Hong Kong SAR China Retail Technology Asia Full time

    Retail Technology Asia (RTA) is a cloud-based digital retail service company headquartered in Hong Kong. We have world-leading SaaS technology. We are looking for a professional Cyber Security Engineer to join our Cyber Security team. The Job Maintain product security specification and requirements Maintain security architecture blueprints Review static...

  • Cyber Security Professional

    5 days ago

    Hong Kong, Central and Western District, Hong Kong SAR China Wizlynx Malaysia Sdn Bhd Full time

    At Wizlynx Malaysia Sdn Bhd, we are seeking a highly skilled Cyber Security Professional to join our team. As a Senior Penetration Tester and Security Specialist, you will be responsible for leading and executing various security engagements, conducting secure code reviews, and performing advanced hands-on penetration testing.The ideal candidate will have a...

  • Head of Cyber Security

    4 weeks ago

    Hong Kong, Central and Western District, Hong Kong SAR China Ambition Full time

    Job Duties:Develop Cyber Security Strategies across different officeImplement Incdent Rsponse PlaybookEnsure third-party vendors adhere to cybersecurity standards.Provide regular updates to IT management on risks and incidents.Manage the external vendors in respect of regular communications and ad-hoc work as assignedJob Requirements:7+ years of experience...

  • Cyber Security Engineering Lead

    7 days ago

    Hong Kong, Central and Western District, Hong Kong SAR China Pinpoint Asia Full time

    Responsibilities:Strategic Cyber DefenseDevelop & Implement Security Strategies:Design, test, and fine-tune security monitoring use cases, correlation rules, and incident response playbooks, leveraging frameworks like MITRE ATT&CK to align with modern threat methodologies.Incident Response Excellence:Streamline the incident response process by correlating...

  • Cyber Security Expert

    5 days ago

    Hong Kong, Central and Western District, Hong Kong SAR China Wizlynx Malaysia Sdn Bhd Full time

    Job Description:The Cyber Security Consultant role at Wizlynx Malaysia Sdn Bhd involves executing a variety of engagements, conducting advanced hands-on penetration testing beyond automated tool validation. This will focus on targets that may include network devices, servers, web and mobile apps, web APIs, wireless infrastructures, IoT devices, and other...

  • Cyber Security Leader

    3 days ago

    Hong Kong, Central and Western District, Hong Kong SAR China BDx Data Centers Full time

    The Cyber Security Leader will provide incident response and readiness as part of a 24x7 Security Operations Centre. This role supports global vulnerability management processes, including OS and infrastructure patching, hardening, and testing efforts.The successful candidate will operate security-related tools to identify active threats, attacks,...

  • Cyber Security Specialist

    7 days ago

    Hong Kong, Central and Western District, Hong Kong SAR China Wizlynx Malaysia Sdn Bhd Full time

    We are seeking a highly skilled Cyber Security Specialist to lead and execute various engagements, conducting secure code review and advanced hands-on penetration testing.This role will involve conducting targeted attacks and discovering vulnerabilities to ensure our customers remain one step ahead of their adversaries.You will have the opportunity to work...

  • Cyber Security Engineer

    6 days ago

    Hong Kong, Central and Western District, Hong Kong SAR China ConnectedGroup Limited Full time

    Our client, one of the largest listed companies in Hong Kong, is renowned for its cutting-edge technologies and customer-centric approach in providing day-to-day services to society. They are currently seeking a cyber security engineer to join their team. This is an initial 12-month contract position with the possibility of renewal. Candidate with more...

  • Cyber Security Director

    5 days ago

    Hong Kong, Central and Western District, Hong Kong SAR China PrimePeak Group Full time

    Job DescriptionCompany OverviewThe PrimePeak Group is a leading Hong Kong conglomerate driving digital transformation initiatives across its business operations. To support this growth, we seek an accomplished cyber security director to lead our tech risk management team in ensuring the effectiveness of our IT risk management systems and internal control...

  • Cyber Security Engineer

    6 days ago

    Hong Kong, Central and Western District, Hong Kong SAR China ConnectedGroup Limited Full time

    Our client, one of the largest listed companies in Hong Kong, is renowned for its cutting-edge technologies and customer-centric approach in providing day-to-day services to society. They are currently seeking a cyber security engineer to join their team. This is an initial 12-month contract position with the possibility of renewal. Candidate with more...

  • Cyber Security Team Lead

    7 days ago

    Hong Kong, Central and Western District, Hong Kong SAR China BDx Data Centers Full time

    Job DescriptionThe Cyber Security Team Lead will provide strategic guidance and leadership to the security operations centre. The role involves developing and implementing incident response playbooks, conducting vulnerability assessments, and managing security tools such as WAF, SIEM, DLP, IAM, and endpoint protection.Key Responsibilities:Develop and...

  • Senior VP, Cloud

    3 days ago

    Hong Kong, Central and Western District, Hong Kong SAR China Osmium Consulting Group Full time

    Job Role Summary:We are seeking a Senior VP, Cloud & Cyber Security to join our team at Osmium Consulting Group. In this role, you will be responsible for overseeing the design, implementation, and management of various IT infrastructure initiatives and projects within our finance sector clients. You will work closely with service providers and vendors to...