Infrastructure Security & Tech Risk Engineer (Trading and Brokerage Industry)

Alexis Services Limited; Hong Kong Island; On-site; HKD 550,000 - 1,000,000; Full time

Job summary

Alexis Services Limited is seeking an Infrastructure Security & Tech Risk Engineer to own security controls and risk governance for its live trading infrastructure in Hong Kong. The role covers end-to-end security implementation, audit evidence, and resilience across production trading stacks.

The ideal candidate has 3–8 years in infrastructure security or tech risk, with hands-on Windows/Linux security, VMware, and familiar with regulatory compliance in trading environments.

Qualifications

• 3–8 years in infrastructure security or tech risk, ideally in finance.
• Strong Windows/Linux system and enterprise network security knowledge.
• Experience with VMware virtualization security and server hardening.
• Vulnerability management, incident handling, HA/DR security validation.
• Regulatory/compliance exposure in trading environments is a plus.

Responsibilities

• Design, implement and maintain infrastructure security controls in live production trading environments.
• Conduct regular technical risk assessments and drive end-to-end remediation across core assets.
• Manage security configurations, firewall rules, access controls and system hardening standards.
• Oversee backup security, disaster recovery validation and high-availability risk reviews.
• Coordinate with tech teams, internal audit and external vendors to meet audit requirements.
• Execute security monitoring, incident support and production change governance.
• Support security resilience reviews and maintain IT compliance documentation.

Skills

Infrastructure security

Tech risk management

Windows/Linux security

VMware security

Vulnerability management

Audit and compliance

Incident response

Tools

VMware

Job description

Infrastructure Security & Tech Risk Engineer (Trading and Brokerage Industry)

Your Next Platform
Our client is a reputable financial trading and brokerage firm focusing on global market trading services, with mission‑critical low‑latency trading infrastructure and stable cross‑market connectivity. The firm is expanding its core technology team and looking for a hands‑on Infrastructure Security & Tech Risk Engineer to own infrastructure security delivery, technical risk governance, audit compliance and operational resilience across live trading technology stacks.

Your ScopeYou will be responsible for end‑to‑end infrastructure security implementation, ongoing technical risk assessment and compliance management for production trading environments. You act as the technical owner for infrastructure security controls, risk remediation, audit evidence preparation and security hardening, safeguarding platform uptime and data integrity for all trading systems.

Key accountabilities:

• Design, implement and maintain infrastructure security controls covering server, storage, virtualisation and enterprise network within live production trading environments
• Conduct regular technical risk assessments, identify security gaps and drive end‑to‑end remediation across core technology assets
• Manage infrastructure security configurations, firewall rules, access control policies and system hardening standards for stable and secure production operation
• Oversee backup security, disaster recovery validation and high‑availability risk reviews to protect trading platform stability and sensitive business data
• Liaise with technology teams, internal audit and external vendors to satisfy regulatory, security and technical audit requirements
• Execute day‑to‑day security monitoring, vulnerability management, incident support and production change management governance
• Support security resilience reviews, produce audit documentation and maintain adherence to internal IT and financial industry compliance standards

Your CredentialsIdeal candidates possess solid hands‑on infrastructure security and technical risk experience within financial or trading environments, with strong troubleshooting and risk‑remediation capability for mission‑critical systems.

• 3‑8 years relevant experience in infrastructure security, tech risk or security operations; financial industry background highly preferred
• Strong hands‑on knowledge of Windows / Linux system security, enterprise network security, access controls and firewall governance
• Solid practical experience with VMware virtualisation security, server hardening and storage security controls
• Familiar with vulnerability management, security incident handling, HA architecture and backup / DR security validation workflows
• Prior trading infrastructure, audit or financial regulatory compliance exposure is a strong advantage
• Possess robust operational awareness of cyber‑security frameworks and infrastructure risk management practices
• Relevant security or ITIL‑aligned technical certifications are preferred

Central, Central and Western District, HK