Senior Cloud Security Engineer – Crypto Exchange

Humanity; Hong Kong; On-site; HKD 900,000 - 1,400,000; Full time

Job summary

Humanity in Hong Kong seeks a hands-on Security Engineer to own cloud security for our exchange and business units. You will harden AWS Baseline, build detection pipelines, run incident response during Hong Kong hours, and lead AI-driven security testing and triage.

You will also review on-chain and code integrations for secure data handling and robust defenses. The role requires 5+ years in security engineering, 3+ in cloud security on AWS, plus experience with EDR/XDR, CSPM tools, and crypto

Qualifications

• 5+ years in security engineering, with at least 3 years hands-on in cloud security on AWS
• At least 1 year experience at a crypto exchange, custodian or high-value fintech
• Experience with IAM, MFA, and least-privilege controls
• Experience building/tuning SIEM detections as code and measuring false positives
• Hands-on with autonomous or LLM-driven security tooling
• Fluent Cantonese is strong for local teams

Responsibilities

• Own the security posture of AWS: IAM least privilege, SCPs, VPC segmentation, KMS and secrets management
• Harden Kubernetes and container workloads: admission control, image signing, runtime policy
• Operate CSPM/CNAPP platforms and drive misconfigurations to closure
• Own incident response end-to-end during Hong Kong hours
• Lead AI pentest agents and purple-team exercises
• Review exchange and on-chain integration for secure data handling

Skills

AWS security

Incident response

Detection engineering

LLM tooling

Kubernetes security

IAM least privilege

OSCP or certs

Cantonese

Tools

Wiz

Prisma Cloud

AWS Security Hub

CrowdStrike

SentinelOne

Microsoft Defender

OWASP ZAP

Job description

Humanity in Hong Kong seeks a hands-on Security Engineer to own cloud security for our exchange and business units. You will harden AWS Baseline, build detection pipelines, run incident response during Hong Kong hours, and lead AI-driven security testing and triage.

You will also review on-chain and code integrations for secure data handling and robust defenses. The role requires 5+ years in security engineering, 3+ in cloud security on AWS, plus experience with EDR/XDR, CSPM tools, and crypto