Security Engineer

BTCC Limited; Hong Kong; On-site; HKD 600,000 - 900,000; Full time

Job summary

BTCC Limited in Hong Kong seeks an experienced Cybersecurity Engineer to own the company\'s security posture across enterprise environments and core infrastructure.

You will design and implement security controls, monitor for incidents, collaborate with DevOps and software teams, and enforce policies, including SAST/DAST/SCA in CI/CD. Strong blockchain security knowledge is a plus.

Qualifications

• 3–5 years of hands-on cybersecurity experience.
• Strong understanding of networking principles.
• Experience with Web3/Crypto industry is preferred.
• Blockchain security SME for exchanges or wallets is advantageous.

Responsibilities

• Design, develop, implement, and lead security technologies across enterprise environments.
• Monitor, triage, investigate, and respond to security incidents and breaches.
• Collaborate with Product, DevOps, IT, and Software teams for cybersecurity guidance.
• Identify gaps and vulnerabilities; provide remediation recommendations.
• Implement CI/CD security tooling: SAST, DAST, and SCA.

Skills

Cybersecurity

Networking fundamentals

Incident response

Endpoint protection

Cloud security

Blockchain security

Tools

FortiGate

SAST/DAST/SCA

Job description

We are seeking an experienced Cybersecurity Engineer to join our team and take ownership of the company's overall security posture.

Key responsibilities

Design, develop, implement, and lead various security technologies, controls, and tools across enterprise environments

Actively participate in the evaluation, hardening, and patching of security systems and core infrastructure

Monitor, triage, investigate, and respond to potential security incidents, alerts, and breaches

Partner with business leaders, Product Managers, DevOps, IT Operations, and Software Engineering teams to provide technical cybersecurity guidance and support

Identify security gaps, missing controls, and vulnerabilities, delivering actionable recommendations for remediation and system improvement

Implement and manage automated security tools within CI/CD pipelines, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA)

Formulate, roll out, and enforce organizational security policies, standards, and industry best practices

Qualifications & Experience

3–5 years of hands‑on experience in cybersecurity / information security

In‑depth understanding of computer networking principles and core IT / security fundamentals

Prior experience in the Web3 / Crypto industry is strongly preferred

Solid domain knowledge in blockchain security, ideally serving as a Subject Matter Expert (SME) for digital asset exchanges and/or hot/cold wallet security architectures

Practical administration experience with enterprise firewalls (FortiGate strongly preferred)

Hands‑on experience configuring and managing IPSec VPN tunnels (on‑premises to cloud infrastructure) and SSL VPNs for client/remote access

Experience deploying, configuring, and managing endpoint protection across both Linux and Windows environments (e.g., Microsoft Defender for Endpoint, Sophos EDR, CrowdStrike Falcon)

Strong grasp of incident handling lifecycle, methodologies, and real‑time containment/triage

Architecture and security posture management experience across AWS and/or Azure

Practical operational experience with Edge protection, WAF, and DDoS mitigation platforms (e.g., Cloudflare, Akamai)