Senior Security Engineer
Qube Research & Technologies · Hong Kong · 5mo ago
Qube Research & Technologies (QRT) is a global quantitative and systematic investment manager, operating in all liquid asset classes across the world. We are a technology and data driven group implementing a scientific approach to investing. Combining data, research, technology, and trading expertise has shaped our collaborative mindset, which enables us to solve the most complex challenges. QRT’s culture of innovation continuously drives our ambition to deliver high quality returns for our investors.
Your future role within QRT
As a Senior Security Engineer, you will play a hands-on role in building, operating, uplifting, and evolving core security platforms and controls across hybrid, multicloud, and on-prem environments. You will act as a subject matter expert for key security solutions, ensuring security controls are observable, scalable, and well integrated across the wider technology ecosystem. You will actively partner with stakeholders, build strong relationships with engineering, infrastructure, and wider business teams, and collaborate across functions to help shape a modern, scalable security function from the ground up.
Key Responsibilities
- Perform the hands-on implementation, operation, and continuous improvement of core security platforms and key security controls, including responsibility for platform health, effectiveness, and ongoing evolution
- Act as subject matter expert for assigned security solutions, championing their roadmap, integration, and operational performance
- Support hands-on BAU operation of security products within a global, 24/7 follow-the-sun Security Operations model, including participation in rotational weekend coverage, in depth troubleshooting, and responding to security events that impact system availability, stability, or operational performance, acting as an escalation point for complex issues
- Design and implement new security controls and technologies to strengthen the organisation’s cyber resilience
- Drive security solution observability and monitoring, ensuring appropriate coverage, alerting, and operational visibility
- Implement automated and scalable security solutions, processes, and controls across hybrid, multi cloud, and on prem environments to improve resilience and reduce manual effort
- Oversee and support security changes in a controlled and well communicated manner
- Build, maintain, and continuously improve operational runbooks, playbooks, and procedures to support reliable day to day operations
- Partner with engineering, infrastructure, and wider business stakeholders to embed practical, scalable security controls that support fast moving delivery models
- Contribute to the design, implementation, and enforcement of security policies, standards, and best practices
- Position security as a business enabler by aligning controls with operational effectiveness and supporting innovation without compromising protection
- Mentor and support other engineers through technical guidance, knowledge sharing, and practical leadership
- To be considered a good cultural fit, you should have:
- Humble, curious and hungry to learn
- Flexible and reliable team player who enjoys working in a collaborative environment
- Strong communication and interpersonal skills will be needed to collaborate with colleagues across the firm globally
Your Present Skillset:
- Minimum 10 years’ experience in a security engineering or closely related role
- Strong hands-on experience operating and uplifting security technologies including firewalls, EDR, identity solutions, vulnerability management platforms, SASE, CASB, proxies, SIEM and security analytics, cloud security controls, and automation driven security platforms
- Strong technical foundations across networking, operating systems, cloud platforms, and security engineering concepts
- Solid understanding of major network protocols across multiple layers of the stack
- Experience protecting and safeguarding data and assets at both the network and platform layers
- Proven hands-on experience operating security controls and security operations capabilities in production environments
- Ability to analyse network traffic and troubleshoot complex issues using tools such as tcpdump and Wireshark
- Strong understanding of offensive security from an adversary perspective, including how attacks manifest and how controls fail in real world environments
- Demonstrated ability to identify and respond to threats in distributed environments, particularly where system availability, stability, or operational performance is impacted
- Programming or scripting skills in at least one high level language, with a strong focus on automation and operational efficiency
- Strong sense of ownership and accountability, with a track record of driving complex issues through to resolution
- Broad understanding of security principles and technologies spanning product and software security, cloud platforms, and business applications
- Experience securing both Windows and Linux based systems
- Extensive experience with one or more public cloud platforms such as AWS, Microsoft Azure, or Alibaba Cloud, particularly within hybrid environments
- In-depth knowledge of threat modelling, risk assessment, and mitigation strategies for largescale, complex systems in fast paced environments
- Experience with low latency or performance sensitive financial systems is an advantage
QRT is an equal opportunity employer. We welcome diversity as essential to our success. QRT empowers employees to work openly and respectfully to achieve collective success. In addition to professional achievement, we are offering initiatives and programs to enable employees achieve a healthy work-life balance.