Networking and Security Engineer (935B0E9)

Referment; Hong Kong; On-site; HKD 900,000 - 1,300,000; Full time

Job summary

Referment is partnering with a global investment manager to hire a Networking and Security Engineer for its Technology Infrastructure team in Hong Kong. The role combines architecture with hands-on operations to own connectivity, security and availability across a multi-site estate.

You will design, deploy and manage Cisco networking, SD-WAN, firewall policies, threat detection and incident response, working 5 days on-site in Hong Kong, with on-call rotation and opportunities to shape security

Qualifications

• Seven+ years in infrastructure, networking and security roles.
• Hands-on Windows Server and Linux (Red Hat/CentOS).
• Solid networking foundations: TCP/IP, VLANs, VPNs, DNS, DHCP; practical Cisco experience.
• Experience implementing security controls: patching, hardening, endpoint protection and monitoring.
• Knowledge of cyber security principles and modern threat landscapes, including AI-driven vectors.
• Experience with virtualization and enterprise storage (SAN/NAS).
• Strong analytical troubleshooting; BAU and project delivery balance.

Responsibilities

• Design, build and maintain network infrastructure across Cisco routers, switches, firewalls, VPNs and wireless.
• Own the SD-WAN architecture end to end: deployment, configuration, optimisation and management.
• Manage firewall infrastructure: rule-base, segmentation and audits.
• Lead security operations: threat detection, incident response, vulnerability management.
• Monitor, triage and respond to events: log analysis, anomaly detection and threat hunting.
• Drive hardening across devices, servers, endpoints and cloud-adjacent systems.
• Run network and vulnerability assessments and penetration testing; remediate findings.
• Improve SIEM, EDR, IDS/IPS and endpoint protection integration with the network.
• Escalate network and security incidents across 2nd/3rd line; work on Windows and Linux estates.

Skills

Networking

Security

Windows Server

Linux

Cisco

Threat detection

Incident response

Vulnerability management

SIEM

EDR

IDS/IPS

Endpoint protection

VMware

SAN/NAS

PowerShell

Bash

Automation

AI security

Tools

VMware

Job description

Referment is working with a global investment manager to hire a Networking and Security Engineer into its Technology Infrastructure function. The firm runs a multi-site network estate in a regulated, fast-moving financial environment, and treats networking and security as two halves of one discipline rather than separate teams. You'll join a small infrastructure group that owns connectivity, availability and defensive strength together, and carries genuine responsibility for both.

The Role

• Design, build and maintain network infrastructure across Cisco routers, switches, firewalls, VPNs and wireless, keeping availability, performance and security tight at every layer.
• Own the SD-WAN architecture end to end: deployment, configuration, optimisation and ongoing management of the fabric across sites.
• Manage firewall infrastructure, including rule-base and policy design, segmentation and regular audits to keep a tightly controlled perimeter.
• Lead security operations across threat detection, incident response and vulnerability management, with network traffic analysis as a core input.
• Monitor, triage and respond to events across the network and wider estate, covering log analysis, anomaly detection and threat hunting, with awareness of modern automation- and AI-driven attack vectors.
• Drive hardening across network devices, servers, endpoints and cloud-adjacent systems, and design segmentation and access control into architecture from the outset rather than retrofitting it.
• Run network and vulnerability assessments and penetration-testing exercises, then prioritise and remediate the findings.
• Improve security tooling such as SIEM, EDR, IDS/IPS and endpoint protection, with particular focus on integration with the network.
• Act as the escalation point for network and security incidents across 2nd and 3rd line, and work across Windows Server and Linux (Red Hat/CentOS) estates to a consistent security baseline.

What We're Looking For

• At least 7 years across infrastructure, networking and security roles.
• Hands‑on Windows Server and Linux (Red Hat/CentOS) experience.
• Solid networking foundations — TCP/IP, VLANs, VPNs, DNS and DHCP — with practical Cisco experience.
• Demonstrated implementation of security controls: patch management and system hardening, endpoint protection and monitoring, and identity and access management.
• A good grasp of cyber security principles and modern threat landscapes, including automation and AI‑driven attack vectors.
• Experience with virtualisation (VMware) and enterprise storage (SAN/NAS).
• Structured, analytical troubleshooting, and the ability to balance BAU work with project delivery.

Desirable

• Scripting or automation experience, for example PowerShell or Bash.
• Prior experience in financial services or another regulated environment.

The role is office-based in Hong Kong, five days per week on‑site, and includes participation in an on‑call rotation supporting critical network and security systems outside business hours. This could suit a network engineer who has moved toward security ownership, or a security engineer with strong hands‑on Cisco and firewall depth, particularly from regulated or financial environments. If you like holding both the architecture and the operational detail, this role gives you that scope.

Referment