We're working with a leading global quantitative investment firm looking to add hands-on Security Engineers across Sydney and Hong Kong

About the Role

This is not a traditional SOC, GRC or purely application security position. You'll work within a global security engineering function responsible for the infrastructure and security controls protecting a highly technical, performance-sensitive environment.

Responsibilities

• Operate and improve the firm's core security platforms across on-premise and cloud environments.
• Responsibilities will span firewalls and network security, SASE/CASB, identity and access management, endpoint protection, vulnerability management and cloud security controls.
• Troubleshoot when a security control causes an infrastructure, connectivity, authentication or performance problem.
• Investigate the issue end-to-end, understand what's happening underneath the security product and find a practical solution.
• Work closely with Infrastructure, Cloud and Engineering teams to automate operational processes, improve observability and ensure security controls protect the organisation without unnecessarily impacting performance or productivity.

You'll ideally have 5+ years of hands-on Security Engineering or Security Platform experience and broad exposure across several security domains rather than specialising exclusively in one.

Required Skills

• 5+ years in hands-on Security Engineering / Security Platform Engineering
• Network Security: Strong firewall fundamentals including stateful/stateless inspection, L3–L7 policies, application signatures, proxies and traffic flows
• SASE / CASB: Hands-on experience operating modern SASE, secure web gateway, proxy or CASB technologies
• Identity & Access: Strong understanding of Active Directory, identity providers, SSO, authentication vs authorisation and access controls
• Endpoint Security: Experience operating EDR/endpoint protection and independently troubleshooting security-related performance or compatibility issues
• Windows: Comfortable troubleshooting user accounts, authentication, permissions, services and Windows security/event logs
• Linux: Strong enough Linux fundamentals to troubleshoot processes, services, permissions, networking and logs
• Networking: Solid TCP/IP, DNS, HTTP/S and TLS fundamentals, including the TLS handshake
• Packet Analysis: Comfortable using tcpdump, Wireshark or similar tools to diagnose network/security issues
• Vulnerability Management: Recent hands-on experience assessing and responding to CVEs, zero-days/n-days and coordinating remediation
• Security Platforms: Broad experience across network, identity, endpoint, vulnerability and cloud security rather than deep specialisation in only one area
• Automation: Python, PowerShell or Bash experience used to automate security operations and reduce manual toil
• Troubleshooting: Strong root-cause mentality able to investigate issues across the security product, endpoint, network, identity and underlying infrastructure
• Mindset: Proactive and pragmatic; focused on fixing underlying problems while balancing security with business operability

Ideally you hav experience in a highly technical global environment where security works directly alongside infrastructure and software engineering.

It's an opportunity to develop genuine breadth across security infrastructure while working on complex systems where reliability, performance, automation and security all matter.