Operational Security Engineer

Wealth Management Operational Security Engineer (APAC Region)

Experience:

Notice Period:

Mode:

Primary Skills (Mandatory):

Operational Security Engineer

Key Responsibilities

Application Security

• Implement Secure SDLC, DevSecOps practices, and Threat Modelling.
  
• Apply security standards for internet-facing & internal applications.
  
• Strengthen vulnerability management (SAST, DAST, SCA, VAPT).
  
• Conduct security risk assessments and present to committees.
  
• Maintain security for all WM GAIM applications.
  

Infrastructure Vulnerability Management

• Identify, classify, prioritize & remediate vulnerabilities.
  
• Ensure regular scanning using

  Rapid7 Nexpose, Tanium, Qualys

  .
• Collaborate with teams for closure of vulnerabilities.
  
• Track and report vulnerability findings, remediation status & compliance.
  

Cybersecurity

• Safeguard WM business data and IT assets.
  
• Coordinate with global & regional security teams.
  
• Manage DLP, Incident Management & SIEM onboarding.
  
• Maintain periodic cybersecurity reporting.
  

Production Security

• Ensure effective vulnerability management for production.
  
• Maintain compliance reporting for production environments.
  

IT Security Compliance

• Ensure alignment with Group & WM GAIM security policies.
  
• Comply with APAC, EU & global regulatory standards (HKMA, MAS, GDPR, FINMA).
  
• Apply NIST, CIS, ISO 2700x security frameworks.
  
• Manage cloud & third-party technology risks.
  

Coordination

• Work with global, regional, and APAC security teams.
  
• Support security awareness, audits, and dashboards.
  

Technical Skills Required

• Mandatory:

  DevSecOps, SAST, SCA, DAST
• Application security scanning & secure coding practices
  
• Vulnerability & Patch Management
  
• Secure architecture design, CI/CD
  
• Encryption, Key Management, IAM
  
• OS: Linux, AIX, Windows, AS400
  
• Databases: Oracle, MSSQL, PostgreSQL, MongoDB
  
• Cloud & container technologies: Docker, Kubernetes
  
• OAuth, SSO, API security, Network security
  

Banking Knowledge

• Wealth Management domain exposure
  
• APAC & global banking regulations
  

Personal Skills

• Strong communication skills
  
• Excellent stakeholder coordination
  
• Analytical, detail-oriented, and proactive
  
• Ability to work independently & within teams
  
• Strong ethics and discretion
  

Qualification

• Bachelors Degree or equivalent
  
• 5–8 years of experience in Information Security
  
• Added advantage: CEH, ISO 27001:2013, CCSK certifications
  

Interview Process

• L1:

  Technical (Virtual)

• L2:

  Technical + Managerial (Face-to-Face)

Contact Details

Email: