Senior Security Engineer (AWS Cloud)

BTSE; Hong Kong; On-site; HKD 900,000 - 1,300,000; Full time

Job summary

BTSE, a fintech and blockchain technology leader, is seeking an Enterprise Security Engineer to safeguard our cloud and data center environments. The role emphasizes cloud security (AWS) with on-premise scope, requiring strong independent judgment and proactive problem-solving.

You will own security monitoring, IAM, encryption policies, vulnerability management, and cross-functional collaboration with DevOps and engineering.

Qualifications

• 5+ years of experience in cloud security, with on-premise security knowledge.
• Strong hands-on experience with AWS as primary cloud platform.
• Experience in infrastructure & cloud architecture, development, support, and troubleshooting.
• Ability to work independently with strong ownership and minimal supervision.
• Strong cross-functional collaboration with infrastructure, DevOps, and engineering teams.
• Hands-on with identity and access management platforms and access governance.
• Experience with security posture management and assessment tools.
• Understanding of ISO 27001, SOC 2, PCI-DSS frameworks.
• Solid knowledge of Linux and Windows server hardening, patching, and baselines.
• Strong analytical and problem-solving skills plus clear communication.

Responsibilities

• Proactively identify security gaps, risks, and inefficiencies across cloud and on-premise environments.
• Lead security initiatives from proposal to execution with cross-functional coordination.
• Own cloud-native security monitoring, threat detection, and posture management.
• Manage centralized identity and access management, with least-privilege policies.
• Design and enforce encryption policies for data at rest and in transit.
• Oversee vulnerability management lifecycle for cloud and on-premise.
• Define server hardening standards and secure containerized environments.
• Develop automation scripts and frameworks to streamline security processes.
• Participate in incident response and perform root-cause analysis.

Skills

Cloud security

AWS

Independent work

Cross-functional collaboration

Tools

AWS Cloud Platform

Job description

About BTSE

BTSE Group is a global leader in fintech and blockchain technology, anchored by three core business pillars: Exchange, Payments, and Infrastructure Development. Serving over 100 corporate clients worldwide, we provide white-label exchange and payment solutions. Our offerings encompass everything from exchange infrastructure hosting and development to custody, wallets, payments, blockchain integration, trading, and more. We are looking for talented professionals in marketing, operations, customer support, and other departments. The roles offered may be on-site, remote, or hybrid, in collaboration with our local partner.

About The Opportunity

We are looking for an Enterprise Security Engineer to manage and secure our cloud infrastructure, data center infrastructure, and server environments. This role is primarily focused on cloud security, with on-premise/data center environments as a secondary but required scope. This role is primarily AWS-based, with experience in other cloud platforms considered a plus. This is a highly autonomous role that requires strong independent judgment, proactive problem-solving, and the ability to drive cross-functional initiatives.

Responsibilities

• Proactively identify security gaps, risks, and inefficiencies across cloud and on-premise environments, and independently lead security initiatives and projects — from proposing solutions through execution — coordinating with stakeholders across Cloud, DevOps, and other functions
• Own and manage cloud-native security monitoring, threat detection, and posture management, with equivalent coverage extended to on-premise/data center environments
• Own and manage a centralized identity and access management platform, including permission structures, session policies, and organization-level policy guardrails, following least-privilege principles
• Design and enforce encryption policies for data at rest and in transit, and conduct periodic access reviews and recertification across cloud and on-premise resources
• Own the end-to-end vulnerability management lifecycle — scanning, identification, prioritization, remediation coordination, verification, and reporting — for both cloud and on-premise infrastructure
• Define and enforce server hardening standards and security baselines across cloud and on-premise environments, and secure containerized environments including image vulnerability scanning, runtime security, and network policies
• Develop and maintain automation scripts, tools, and frameworks to streamline security processes
• Participate in incident response activities, investigate security incidents, and conduct root cause analysis

Requirements

• 5+ years of experience in cloud security, with working knowledge of on-premise/data center security
• Strong hands-on experience with AWS as your primary cloud platform
• Experience with infrastructure & cloud architecture, development, support, and troubleshooting
• Demonstrated ability to work independently with strong ownership — identifying problems, proposing solutions, and driving initiatives with minimal supervision
• Strong cross-functional collaboration skills, particularly with infrastructure, DevOps, and engineering teams
• Hands-on experience with identity and access management platforms, including access governance
• Experience with security posture management and assessment tools
• Understanding of compliance frameworks (ISO 27001, SOC 2, PCI-DSS)
• Solid understanding of server operating systems (Linux, Windows), including hardening, patching, and baseline implementation
• Strong analytical and problem-solving skills, with excellent cross-functional communication

Nice To Haves

• Experience with additional cloud platforms (Azure, GCP)
• Familiarity with container orchestration security (network policies, access controls, policy enforcement)
• Proficiency in scripting and automation languages
• Experience with secrets management solutions
• Knowledge of Zero Trust architecture and conditional access / risk-based authentication
• Familiarity with emerging technologies (e.g. web3/blockchain)
• Relevant security certifications (e.g. CISSP, CEH, cloud security certifications) or equivalent experience

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.