Infrastructure Security Analyst

Responsibilities :

• Assist in managing the IT security agenda across clients, which includes strict requirements around Data protection, Access, and Resiliency.
• Help manage regular client audits and surveys by reviewing controls in place.
• Be a key resource for addressing client inquiries related to IT security and conducting client-facing reviews.
• Liaise with the internal DevOps, Infrastructure, and Analyst teams to provide the right answers and evidence for client requests.
• Actively help to implement security practices and controls across the company internally.
• Work with the DevOps team to design and implement security practices specifically for the company's AWS application.
• Identify required changes if any security gap is identified and prioritize/design the changes with the DevOps team and the developers.

Academics and experience:

• Background as developer or infrastructure engineer , with exposure to network controls / gateways / firewalls
• Similar role in the candidate existing position (Security or Network Analyst)

Key Skills:

• Strong IT Foundation: Possess a deep understanding of core IT concepts, including network protocols, database management, and microservices architecture.
• Advanced Security Knowledge: Demonstrate very strong awareness and hands-on experience with key security topics such as gateways, firewalls, cloud computing, authentication methods (OAuth, certificates), encryption, and modern cybersecurity practices.
• Cloud Infrastructure Experience: Proven experience working in a cloud environment, with a strong preference for Amazon Web Services (AWS).
• Hands-On Operational Skills: Ability to operate and utilize monitoring tools like Grafana for security analysis and incident response.
• Secure Software Development Lifecycle (SDLC): Excellent understanding of the SDLC, including experience with Agile methodologies and various testing frameworks to ensure security is embedded throughout the development process.
• Excellent Communication: Superior verbal and written communication skills, with fluency in English.
• Thorough Documentation: A proven ability to create clear, concise, and comprehensive documentation for security processes and systems.
• Strong Interpersonal Skills: Exhibit strong analytical, problem-solving, and organizational skills, coupled with a proactive and driven attitude.
• Knowledge of Financial markets is not required

This is a full-time position based in Hong Kong, Central.