Lead, Security Engineering
Hex Trust, Hong Kong
Job Description
Hex Trust is a fully-licensed and insured digital asset custodian. Led by veteran banking technologists and award-winning financial services experts, Hex Trust has built Hex Safe, a proprietary bank-grade platform that delivers solutions for digital asset protocols, foundations, financial institutions, and the Web3 ecosystem. Hex Trust has offices in Singapore, Hong Kong, Dubai, Italy, and Vietnam.
Position Summary
Hex Trust Information Security Team is looking for a highly skilled and motivated Lead, Security Engineering to lead the Security Team's engineering and operations, ensure the right talent is in place, coach and mentor team members. Collaboration with other teams is essential to align and achieve security objectives. You are expected to have deep hands-on experience with least somesecurity domains, such as Cloud Security, Security Engineering, Infrastructure Security, Zero Trust architecture, Security Operations, On-premise Security, and Crypto Wallet Security with strong application background.
Responsibilities
- Establish Threat modeling in the company, and propose and implement mitigation strategies
- Plan, implement and operate our security solution stack together with the rest of the team (CSPM, CWPP, PAM, SIEM, EDR, WAF, DLP, Vulnerability management tool )
- Assess current cybersecurity processes and propose improvements on the processes and Pamp;P in order to have the highest overall cybersecurity standards against both external and internal hacks, fraud, or theft.
- Manage and perform a variety of technical assessments including penetration tests source code reviews, security posture reviews, purple teaming etc.
- Take charge of security incident management and provide oversight of follow-up and remediation actions as identified. Liaise between key stakeholders, managers, IT professionals and other Cyber Security staff within the team.
- Manage our security vendors and partners
Requirements
- Experience working in DevOps / DevSecOps teams, understanding and working knowledge of tooling used by these teams (Terraform, CI/CD pipelines)
- Experience with PAM, IAM applications, knowledge of OpenID, OAuth2, PKI
- Experience with SaaS security tooling (CDNs, ng-WAFs, etc.)
- Experience working in Cloud Native environment (AWS, GCP)
- Experience with network security infrastructure (Web content filtering, Firewall, IDS and DLP controls)
- Advanced security knowledge of Cloud Native stack (Kubernetes, Containers, AWS, GCP)
- Scripting and automation experience (Python, TypeScript, Bash, etc.)
- Application Penetration Testing, Application Security Reviews, Purple-teaming
- Incident Response management and investigations
- Operational familiarity with key management and HSM systems
- At least 5 years of experience in some of the above security domains
- At least 10 years of experience in the industry and at least 2 years of team management experience
- Cloud certifications, CISSP, OSCP, OSEP, CRTP, CRTE will be a plus
- Ability to influence others and work towards a common vision or goal
- You know what high quality secure environment looks like
- You know what it takes to run motivated team of professionals
- You are passionate about security and building top notch security teams
- You are interested in Blockchain and Crypto Currencies
- You are great communicator, able to explain complex security concepts, engage with engineers and business people alike
*We understand you may not check all the boxes, but would still like to hear from you on how you think you can contribute.
Benefits
As one of the leading Web3 innovators, Hex Trust offers a front-row seat in the ever-changing blockchain amp; crypto industry. We genuinely believe that people are our greatest asset, and invest heavily so they’re best prepared to support our mission to unlock ownership in decentralized markets! You will be joining a company that is always committed to creating a supportive amp; inclusive environment that promotes personal and professional growth that furthers your success and drives innovation, collaboration, and passion in the blockchain space.
At Hex Trust, we are proud of our R.A.P.I.D. culture:
- Respect and Inclusion
- Agile
- Passionate
- Indivisible
- Driven by integrity
Join us at Hex Trust and not only can you look forward to working with blockchain professionals to build the decentralized future, but also:
- Competitive Salaries amp; Bonuses
- Generous Amounts of Paid Time Off (incl. leave for Birthdays, Work Anniversary, and Mental Health etc.)