Senior Security Engineer, Cloud Security & Vulnerability Management

Crypto.com; Hong Kong Island; On-site; HKD 600,000 - 900,000; Full time

Job summary

A leading company in the cryptocurrency sector is seeking an intermediate level security specialist for their Global Cybersecurity Services Team. The role involves enhancing security technology, building AI-driven automation workflows, and managing cloud security initiatives. Ideal candidates will have significant experience in security operations, incident response, and cloud environments, with a focus on automation and vulnerability management. This position offers an opportunity to lead projects and mentor junior specialists in a dynamic and innovative environment.

Qualifications

• 5-7 years of experience in Information Security.
• Technical hands-on experience in Security Operations and Cloud Security.
• Proficiency in verbal and written English.

Responsibilities

• Develop and maintain cloud security controls.
• Lead incident response and investigations.
• Design Ansible playbooks for automation.

Skills

Cloud Security

Incident Response

Digital Forensics

Automation

Vulnerability Management

Leadership

Scripting

Tools

SIEM

EPP/EDR/XDR

Cloud Security Tools

Digital Forensics Software

Job description

We are looking for an intermediate level security specialist to join our Global Cybersecurity Services Team. As part of our modern cybersecurity operating model, the role will be engaged in enhancing our security technology stack, building AI driven security automation workflows and contributing to security operations and vulnerability management.

We are building a modern, multi-cloud, intelligence driven security operations capability that will heavily involve AI and automation; and will require engineering and operational skills at all levels.

Responsibilities

• Cloud & Container Security - Develop, deploy and maintain advanced cloud security controls to enable the prevention, detection and response to security threats in cloud and container environments. Configure and deploy cloud-native security controls (eg. AWS GuardDuty, Google SCC, Azure Security Centre, CSPM/KSPM, CNAPP solutions etc.)
• Cloud Investigation and incident response - Proficient in end-to-end Incident Response. Able to take the lead and provide guidance during investigations and incidents to pivot the investigation, drive containment, mitigation and other security outcomes. Proficient in performing investigations using open source and proprietary tools, including but not limited to - EPP/EDR/XDR software, Digital Forensics tools/software, SIEM platforms
• Configuration Management - Design, develop, and maintain Ansible playbooks for automating server configuration hardening in alignment with various compliance frameworks (e.g., CIS, PCI-DSS, NIST).
• Cloud Vulnerability Management - Configure, execute and maintain regular vulnerability scans on cloud environments using industry standard tools. Analyze scan results to assess the severity of the vulnerabilities, leveraging industry best practices and frameworks (eg. CVSS, etc); and prioritise remediation based on risk and business impact.
• Security Projects - Lead projects and initiatives that may involve - Cloud Security Posture Management (CSPM), Container Security, Native Cloud Security Enhancements (AWS, Azure, GCP), Runtime Vulnerability Management, Threat Hunting, Network/Endpoint/Cloud security reviews, etc.
• Leadership - Be comfortable with cross-functional leadership and stakeholder management. Be willing to lead and nurture a small team of junior security specialists.

• 5-7 years of experience in Information Security, with technical hands-on experience in Security Operations, Security Engineering, Digital Forensics, Incident Response, Endpoint Security or Cloud Security.
• Working Experience with SIEM, EPP/EDR/XDR, SOAR, Cloud Security (CSPM, Container Security, etc), Digital Forensics software & tools.
• Deep expertise in Cloud environments like AWS, Azure and GCP.
• Experience in Amazon EKS and Azure AKS for deploying, managing, and securing container orchestration platforms.
• Experience in applying AI/ML in cybersecurity use cases.
• Experience in using scripting languages to automate tasks and manipulate data or programming experience.
• Highly self-motivated, attention to detail and outcome driven.
• Proficiency in verbal and written English.