Networking and Security Engineer (6CD7793)

Referment; Hong Kong; On-site; HKD 600,000 - 1,000,000; Full time

Job summary

Referment is seeking a Networking and Security Engineer to join its Technology Infrastructure function in Hong Kong. The role covers design, build and ongoing management of network and security across a multi-site estate, with end-to-end SD-WAN and firewall responsibilities.

You will lead security operations, threat detection and vulnerability management while aligning with modern automation and AI-driven attack vectors.

Qualifications

• 7+ years across infrastructure, networking and security roles.
• Hands-on Windows and Linux (Red Hat/CentOS) experience.
• Strong networking foundations with Cisco experience.
• Experience implementing security controls and IAM concepts.
• Understanding of cyber security principles and AI-driven threat landscapes.
• Experience with virtualization and enterprise storage.

Responsibilities

• Design, build and maintain network infrastructure across Cisco routers, switches, firewalls, VPNs and wireless.
• Own the SD-WAN architecture end to end: deployment, configuration, optimisation and ongoing management across sites.
• Manage firewall infrastructure, including rule-base and policy design, segmentation and audits.
• Lead security operations across threat detection, incident response and vulnerability management.
• Monitor, triage and respond to events across the network and wider estate, with log analysis and anomaly detection.
• Drive hardening across network devices, servers, endpoints and cloud-adjacent systems; design segmentation and access controls from the outset.
• Run network and vulnerability assessments and penetration-testing exercises and remediate findings.
• Improve security tooling (SIEM, EDR, IDS/IPS) with focus on integration with the network.
• Act as escalation point for network and security incidents across 2nd/3rd line; work across Windows Server and Linux estates to a secure baseline.

Skills

Windows Server

Linux (Red Hat/CentOS)

Networking fundamentals (TCP/IP, VLANs

Security controls (patch management

Threat detection & incident response

Automation & AI-driven security

VMware virtualization

SAN/NAS storage

Cisco experience (firewalls, routers,

Tools

VMware

Cisco IOS

SIEM

EDR

IDS/IPS

Job description

Referment is working with a global investment manager to hire a Networking and Security Engineer into its Technology Infrastructure function. The firm runs a multi-site network estate in a regulated, fast-moving financial environment, and treats networking and security as two halves of one discipline rather than separate teams. You'll join a small infrastructure group that owns connectivity, availability and defensive strength together, and carries genuine responsibility for both.

The Role

• Design, build and maintain network infrastructure across Cisco routers, switches, firewalls, VPNs and wireless, keeping availability, performance and security tight at every layer.
• Own the SD-WAN architecture end to end: deployment, configuration, optimisation and ongoing management of the fabric across sites.
• Manage firewall infrastructure, including rule-base and policy design, segmentation and regular audits to keep a tightly controlled perimeter.
• Lead security operations across threat detection, incident response and vulnerability management, with network traffic analysis as a core input.
• Monitor, triage and respond to events across the network and wider estate, covering log analysis, anomaly detection and threat hunting, with awareness of modern automation- and AI-driven attack vectors.
• Drive hardening across network devices, servers, endpoints and cloud-adjacent systems, and design segmentation and access control into architecture from the outset rather than retrofitting it.
• Run network and vulnerability assessments and penetration-testing exercises, then prioritise and remediate the findings.
• Improve security tooling such as SIEM, EDR, IDS/IPS and endpoint protection, with particular focus on integration with the network.
• Act as the escalation point for network and security incidents across 2nd and 3rd line, and work across Windows Server and Linux (Red Hat/CentOS) estates to a consistent security baseline.

What We're Looking For

• At least 7 years across infrastructure, networking and security roles.
• Hands-on Windows Server and Linux (Red Hat/CentOS) experience.
• Solid networking foundations — TCP/IP, VLANs, VPNs, DNS and DHCP — with practical Cisco experience.
• Demonstrated implementation of security controls: patch management and system hardening, endpoint protection and monitoring, and identity and access management.
• A good grasp of cyber security principles and modern threat landscapes, including automation and AI-driven attack vectors.
• Experience with virtualisation (VMware) and enterprise storage (SAN/NAS).
• Structured, analytical troubleshooting, and the ability to balance BAU work with project delivery.

Desirable

• Scripting or automation experience, for example PowerShell or Bash.
• Prior experience in financial services or another regulated environment.

The role is office-based in Hong Kong, five days per week on-site, and includes participation in an on-call rotation supporting critical network and security systems outside business hours.

This could suit a network engineer who has moved toward security ownership, or a security engineer with strong hands-on Cisco and firewall depth, particularly from regulated or financial environments. If you like holding both the architecture and the operational detail, this role gives you that scope.

#Referment