Security-First Network Engineer (Cisco, SD-WAN, Firewalls)

Capula Investment Management LLP; Hong Kong; On-site; HKD 600,000 - 1,200,000; Full time

Job summary

Capula Investment Management LLP is seeking a hands-on Network & Security Engineer to design, maintain, and strengthen the firm’s network and security infrastructure. The role combines network engineering with proactive security ownership across Windows and Linux environments, embedding secure design from day one.

You will lead SD-WAN deployment across sites, manage firewall policies, and drive security hardening and threat detection. This is an office-based role with five days on-site presence.

Qualifications

• 7+ years in infrastructure, networking and security roles.
• Strong hands-on experience with Windows Server and Linux (Red Hat/CentOS).
• Solid networking knowledge including TCP/IP, VLANs, VPNs, DNS, DHCP, with Cisco experience.
• Experience implementing and supporting security controls (patching, hardening, endpoint protection).
• Familiarity with security operations, threat detection, incident response, and vulnerability management.

Responsibilities

• Design, implement, and maintain network infrastructure (Cisco routers, switches, firewalls, VPNs, wireless).
• Own and manage SD-WAN architecture across sites.
• Manage firewall rule bases, policy design and audits to secure perimeter.
• Lead security operations, threat detection, incident response, vulnerability management.

Skills

Networking

Security

Threat detection

Incident response

Troubleshooting

Tools

Cisco IOS

Firewall management

SD-WAN

VMware

SIEM/EDR

Job description

Capula Investment Management LLP is seeking a hands-on Network & Security Engineer to design, maintain, and strengthen the firm’s network and security infrastructure. The role combines network engineering with proactive security ownership across Windows and Linux environments, embedding secure design from day one.

You will lead SD-WAN deployment across sites, manage firewall policies, and drive security hardening and threat detection. This is an office-based role with five days on-site presence.