Cyber Security Engineer

Xcede; Hong Kong; On-site; HKD 900,000 - 1,400,000; Full time

Job summary

Xcede is assisting a leading global investment manager in Hong Kong to hire a Cyber Security Engineer. This senior, engineering-led role acts as the security lead in Hong Kong, partnering with colleagues across the firm’s international offices to shape strategy and run day-to-day operations.

The successful candidate will bring experience from financial services or large tech environments, possessing expertise in security operations, threat hunting, detection engineering and security automation,

Qualifications

• Minimum 5 years of experience in cyber security.
• Familiarity with Infrastructure as Code (Terraform, CloudFormation) and configuration management (Puppet, Ansible).
• Knowledge of network security architecture and application security principles.
• Relevant certifications such as OSCP, OSEP, GCIH or GCFA are advantageous.
• Excellent communication skills, with the ability to explain complex technical concepts clearly.
• Experience of, or a strong interest in, using AI agents to automate security workflows, such as vulnerability discovery, validation and remediation, is highly desirable.

Responsibilities

• Contribute to the global cyber security strategy and lead its execution in the region, as part of a single global team.
• Act as a first line of defence for security incidents, leading investigations through containment, eradication, recovery and root cause analysis.
• Continuously improve detection logic, automation and response playbooks to reduce MTTD and MTTR.
• Embed security controls into systems, applications and cloud platforms, and lead threat modelling sessions.
• Assess and mitigate security risks associated with AI/ML systems and contribute to secure AI lifecycle practices.
• Work closely with Infrastructure, End User Computing and wider technology teams.

Skills

Security Operations

Incident response

Threat hunting

Forensic analysis

Security engineering

Detection engineering

Python

PowerShell

Go

AI security

LLM security

Tools

Terraform

CloudFormation

Puppet

Ansible

Job description

Our client, a leading global investment manager running quantitative, systematic and fundamental strategies, is seeking a Cyber Security Engineer to join its Hong Kong office. Technology and data have been at the core of the business for over two decades, and the security function is engineering-led. This is a lead role within a global security team, covering strategy, execution and day-to-day operations. The successful candidate will be the senior security presence in Hong Kong while working closely with colleagues across the firm’s other international offices.

The Profile

The successful candidate will come from a complex, fast‑paced technology environment, such as financial services, trading, fintech or a large‑scale technology company. They will have built their career across the core disciplines of cyber security before moving clearly into software engineering and AI. Specifically, they will bring:

• A grounding in Security Operations, including alert triage, incident response, threat hunting and forensic analysis across Windows and/or Linux environments
• Security Engineering experience, with hands‑on implementation, integration and support of enterprise security platforms
• Strong Detection Engineering capability, designing, building and tuning SIEM/EDR detections and turning threat intelligence and adversary TTPs into effective detection logic
• A clear move into Software Engineering, with expert programming skills in Python, PowerShell or Go and a track record of building security automation, tooling and guardrails
• An interest in AI security, or exposure to it, including securing LLM‑integrated applications and developing detections for threats such as prompt injection, model abuse and data leakage

The Role

• Contribute to the global cyber security strategy and lead its execution in the region, as part of a single global team
• Act as a first line of defence for security incidents, leading investigations through containment, eradication, recovery and root cause analysis
• Continuously improve detection logic, automation and response playbooks to reduce MTTD and MTTR
• Embed security controls into systems, applications and cloud platforms, and lead threat modelling sessions
• Assess and mitigate security risks associated with AI/ML systems and contribute to secure AI lifecycle practices
• Work closely with Infrastructure, End User Computing and wider technology teams

Requirements

• Minimum of 5 years’ experience in a cyber security role
• Familiarity with Infrastructure as Code (Terraform, CloudFormation) and configuration management (Puppet, Ansible)
• Knowledge of network security architecture and application security principles
• Relevant certifications such as OSCP, OSEP, GCIH or GCFA are advantageous
• Excellent communication skills, with the ability to explain complex technical concepts clearly
• Experience of, or a strong interest in, using AI agents to automate security workflows, such as vulnerability discovery, validation and remediation, is highly desirable

While it is preferable for candidates to be in Hong Kong already, relocation can be considered.