Networking and Security Engineer (6CD7793)

Referment; Hong Kong; On-site; HKD 700,000 - 1,100,000; Full time

Job summary

Referment collaborates with a global investment manager to hire a Networking and Security Engineer for its Technology Infrastructure function in Hong Kong. The role combines networking and security disciplines within a small, accountable infrastructure group responsible for connectivity, availability and defensive strength across a multi-site estate.

You will design, build and maintain Cisco-based network infrastructure, own SD-WAN end-to-end, manage firewall policies, and lead security

Qualifications

• 7+ years in infrastructure, networking and security roles.
• Hands-on Windows Server and Linux (Red Hat/CentOS) experience.
• Strong TCP/IP, VLAN, VPN, DNS, DHCP with Cisco expertise.
• Experience implementing security controls and patch management.
• Knowledge of cyber security principles and threat landscapes.
• Experience with virtualization (VMware) and SAN/NAS.
• Ability to balance BAU with project delivery.

Responsibilities

• Design, build and maintain network infrastructure across Cisco routers, switches, firewalls, VPNs and wireless.
• Own the SD-WAN architecture end to end: deployment, configuration, optimisation and ongoing management of the fabric across sites.
• Manage firewall infrastructure, including rule-base and policy design, segmentation and regular audits.
• Lead security operations across threat detection, incident response and vulnerability management.
• Monitor, triage and respond to events across the network and wider estate, with log analysis and threat hunting.
• Drive hardening across network devices, servers, endpoints and cloud-adjacent systems.
• Run network and vulnerability assessments and penetration-testing exercises, prioritise and remediate findings.
• Improve security tooling such as SIEM, EDR, IDS/IPS and endpoint protection.
• Act as the escalation point for network and security incidents across 2nd and 3rd line.

Skills

Networking fundamentals

Security operations

Windows Server

Linux (Red Hat/CentOS)

Firewall management

VPNs

SIEM/EDR/IDS

Threat detection

Incident response

Vulnerability management

Network engineering

AI security awareness

Tools

VMware

Cisco IOS

SIEM

EDR

IDS/IPS

Job description

Referment is working with a global investment manager to hire a Networking and Security Engineer into its Technology Infrastructure function. The firm runs a multi-site network estate in a regulated, fast-moving financial environment, and treats networking and security as two halves of one discipline rather than separate teams. You'll join a small infrastructure group that owns connectivity, availability and defensive strength together, and carries genuine responsibility for both.

The Role

• Design, build and maintain network infrastructure across Cisco routers, switches, firewalls, VPNs and wireless, keeping availability, performance and security tight at every layer.
• Own the SD-WAN architecture end to end: deployment, configuration, optimisation and ongoing management of the fabric across sites.
• Manage firewall infrastructure, including rule-base and policy design, segmentation and regular audits to keep a tightly controlled perimeter.
• Lead security operations across threat detection, incident response and vulnerability management, with network traffic analysis as a core input.
• Monitor, triage and respond to events across the network and wider estate, covering log analysis, anomaly detection and threat hunting, with awareness of modern automation- and AI-driven attack vectors.
• Drive hardening across network devices, servers, endpoints and cloud-adjacent systems, and design segmentation and access control into architecture from the outset rather than retrofitting it.
• Run network and vulnerability assessments and penetration-testing exercises, then prioritise and remediate the findings.
• Improve security tooling such as SIEM, EDR, IDS/IPS and endpoint protection, with particular focus on integration with the network.
• Act as the escalation point for network and security incidents across 2nd and 3rd line, and work across Windows Server and Linux (Red Hat/CentOS) estates to a consistent security baseline.

What We're Looking For

• At least 7 years across infrastructure, networking and security roles.
• Hands‑on Windows Server and Linux (Red Hat/CentOS) experience.
• Solid networking foundations — TCP/IP, VLANs, VPNs, DNS and DHCP — with practical Cisco experience.
• Demonstrated implementation of security controls: patch management and system hardening, endpoint protection and monitoring, and identity and access management.
• A good grasp of cyber security principles and modern threat landscapes, including automation and AI‑driven attack vectors.
• Experience with virtualisation (VMware) and enterprise storage (SAN/NAS).
• Structured, analytical troubleshooting, and the ability to balance BAU work with project delivery.

Desirable

• Scripting or automation experience, for example PowerShell or Bash.
• Prior experience in financial services or another regulated environment.

The role is office-based in Hong Kong, five days per week on‑site, and includes participation in an on‑call rotation supporting critical network and security systems outside business hours. This could suit a network engineer who has moved toward security ownership, or a security engineer with strong hands‑on Cisco and firewall depth, particularly from regulated or financial environments. If you like holding both the architecture and the operational detail, this role gives you that scope.

Referment