Trading Infrastructure Security & Tech Risk Engineer

Alexis Services Limited; Hong Kong Island; On-site; HKD 550,000 - 1,000,000; Full time

Job summary

Alexis Services Limited is seeking an Infrastructure Security & Tech Risk Engineer to own security controls and risk governance for its live trading infrastructure in Hong Kong. The role covers end-to-end security implementation, audit evidence, and resilience across production trading stacks.

The ideal candidate has 3–8 years in infrastructure security or tech risk, with hands-on Windows/Linux security, VMware, and familiar with regulatory compliance in trading environments.

Qualifications

• 3–8 years in infrastructure security or tech risk, ideally in finance.
• Strong Windows/Linux system and enterprise network security knowledge.
• Experience with VMware virtualization security and server hardening.
• Vulnerability management, incident handling, HA/DR security validation.
• Regulatory/compliance exposure in trading environments is a plus.

Responsibilities

• Design, implement and maintain infrastructure security controls in live production trading environments.
• Conduct regular technical risk assessments and drive end-to-end remediation across core assets.
• Manage security configurations, firewall rules, access controls and system hardening standards.
• Oversee backup security, disaster recovery validation and high-availability risk reviews.
• Coordinate with tech teams, internal audit and external vendors to meet audit requirements.
• Execute security monitoring, incident support and production change governance.
• Support security resilience reviews and maintain IT compliance documentation.

Skills

Infrastructure security

Tech risk management

Windows/Linux security

VMware security

Vulnerability management

Audit and compliance

Incident response

Tools

VMware

Job description

Alexis Services Limited is seeking an Infrastructure Security & Tech Risk Engineer to own security controls and risk governance for its live trading infrastructure in Hong Kong. The role covers end-to-end security implementation, audit evidence, and resilience across production trading stacks.

The ideal candidate has 3–8 years in infrastructure security or tech risk, with hands-on Windows/Linux security, VMware, and familiar with regulatory compliance in trading environments.