2027 Fresh Grad Hire - Backend Engineer (Security)

Futu Holdings Limited; Hong Kong; On-site; HKD 700,000 - 1,100,000; Full time

Job summary

Futu Holdings Limited in Hong Kong is seeking a skilled security engineer to build and safeguard the company’s security systems, including a DevSecOps toolchain, risk control systems, FWAF, and SIEM. You will own development iterations for core systems, translate business requirements into scalable tool capabilities, and continuously improve tooling performance and usability.

Fluency in English and Chinese is required, with a strong foundation in CS, software design, and modern security

Qualifications

• Bachelor's degree or above in CS or similar field.
• Proficiency in at least one language (Go/Rust/C++, etc.); strong code design and OOP understanding.
• Proficiency with MySQL and Redis; solid data modeling and SQL/NoSQL optimization.
• Strong self-motivation, cross-team communication, and ability to deliver moderate-complexity projects.
• English & Chinese as working languages; able to read regulations and communicate in English.

Responsibilities

• Take ownership of development iterations for at least one core system in the DevSecOps toolchain, risk control, FWAF, or SIEM.
• Analyze business requirements and translate security needs into standardized tool capabilities; drive scalable adoption.
• Improve the security tooling ecosystem; enhance tool performance, stability, and usability to support business iterations.

Skills

Go

Rust

C++

Code design

OOP

MySQL

Redis

SQL/NoSQL optimization

Cross-team communication

Bilingual English/Chinese

Education

Bachelor's degree in Computer Science

Tools

FWAF

SIEM

DevSecOps toolchain

Job description

Responsible for building security systems (including the DevSecOps toolchain, risk control systems, FWAF, SIEM, etc.), safeguarding the company's overall business security through high-quality engineering delivery.

Responsibilities

• Take ownership of development iterations for at least one core system among the DevSecOps toolchain, risk control systems, FWAF, and SIEM, safeguarding overall business security
• Deeply explore and analyze business requirements, abstract security needs into standardized tool capabilities, and drive scalable adoption and end-to-end closed loops
• Continuously improve the existing security tooling ecosystem, optimize system weaknesses, and enhance tool performance, stability, and usability to better support business iterations

Responsible for building security systems (including the DevSecOps toolchain, risk control systems, FWAF, SIEM, etc.), safeguarding the company's overall business security through high-quality engineering delivery.

Responsibilities

• Take ownership of development iterations for at least one core system among the DevSecOps toolchain, risk control systems, FWAF, and SIEM, safeguarding overall business security
• Deeply explore and analyze business requirements, abstract security needs into standardized tool capabilities, and drive scalable adoption and end-to-end closed loops
• Continuously improve the existing security tooling ecosystem, optimize system weaknesses, and enhance tool performance, stability, and usability to better support business iterations

Requirements

• Bachelor's degree or above, with solid foundations in computer science and software technology
• Proficiency in at least one language (Go/Rust/C++, etc.); excellent code design skills; deep understanding of object-oriented programming and design patterns
• Proficiency with mainstream storage components such as MySQL and Redis; strong data modeling skills and experience in SQL/NoSQL optimization
• Strong self-motivation, good cross-team communication skills, and a sense of technical responsibility; ability to independently deliver projects of moderate complexity
• English & Chinese as working languages: fluent reading and writing; able to read English regulations and standards documents, and to conduct day-to-day email and meeting communication in English

Preferred Qualifications

• Basic understanding of security theory (web application security / data security / identity and access management)
• Familiarity with AI agent development and spec-driven development (SDD) workflows

*Open to candidates graduating between January 2026 and August 2027.