DevSecOps & Security Automation Engineer

Cyber Security Engineer Cyber Security Engineer Technology-CDSIOHong Kong (SAR)Permanent - Full Time; Hong Kong; On-site; HKD 320,000 - 520,000; Full time

Job summary

Mox Bank is seeking a Cyber Security Engineer to join the Cybersecurity team in Hong Kong. The role focuses on security engineering, automation, and maintaining internal cybersecurity tooling within CI/CD pipelines.

You will embed automated security testing, manage policy-as-code linting tools, and write scripts to reduce manual effort while ensuring tooling reliability. With 2–3+ years of experience, you will work under mentorship toward DevSecOps and platform security, building scripts in

Qualifications

• Writing and maintaining scripts in Python, Bash, or similar languages to automate routine security tasks and operational workflows.
• Foundational exposure to AWS cloud concepts, IAM roles, infrastructure-as-code, configuration drift monitoring, and cloud security hygiene.
• Maintaining internal systems, documentation, dependencies, and automation solutions so that cybersecurity tooling remains reliable, current, and production-aligned.

Responsibilities

• Assist in day-to-day administration and health checks of automated security tools embedded in developer pipelines.
• Monitor pipelines for exposed secrets, API keys, and credentials, triggering rapid remediation when alerts occur.
• Review automated scan results and guide development squads on remediation steps.

Skills

Python

Bash

Automation

Git

CI/CD

Tools

SAST

DAST

IaC

AWS

Job description

Mox Bank is seeking a Cyber Security Engineer to join the Cybersecurity team in Hong Kong. The role focuses on security engineering, automation, and maintaining internal cybersecurity tooling within CI/CD pipelines.

You will embed automated security testing, manage policy-as-code linting tools, and write scripts to reduce manual effort while ensuring tooling reliability. With 2–3+ years of experience, you will work under mentorship toward DevSecOps and platform security, building scripts in