Total 181 process development engineer job vacancies in Legal / Public / Security category in Hong Kong

About Triple-A

Triple-A is a global payment institution licensed in the United States, Europe, and Singapore, enabling businesses worldwide to pay and get paid in both local and digital currencies.

We empower businesses to reach over 560M digital currency owners, boost revenue, and optimise costs through stablecoin and cryptocurrency payments, while eliminating volatility, custody, and compliance risks. Our commitment is to build a more efficient, inclusive global payment ecosystem by bridging the gap between local and digital currencies.

Registered with the United States Financial Crimes Enforcement Network (FinCEN), licensed by the Monetary Authority of Singapore (MAS), and Banque de France’s ACPR in Europe, Triple-A is trusted by over 20,000 businesses worldwide to make global crypto payments simple, secure, and cost-effective. For more information, visit www.triple-a.io.

Join the team

We are a dynamic and passionate team building towards a more efficient global payment ecosystem. We actively bridge the gaps in cross-border payments, between traditional & digital currencies, and Web2 and Web3.

Guided by our CEO, Eric Barbier, who brings 20 years of experience and a proven track record in building and scaling payment companies worldwide, Triple-A is growing our team. If you’re bold, tenacious, and creative, we believe you’d be a perfect match for us!

About the Role

We are seeking a hands-on Security Engineer to strengthen our security posture. You will embed security into our cloud infrastructure, applications, devops pipelines and operational processes, ensuring compliance with global regulators and industry standards. You will partner with engineering, compliance and product teams to anticipate, detect and mitigate security risks in our platform.

Key Responsibilities

• Design, implement and maintain security controls for cloud environments and on-premise systems
• Conduct threat modeling, code reviews and architecture risk assessments for new features
• Manage vulnerability management program: regular scans, prioritization, remediation verification
• Develop and maintain security monitoring (SIEM/SOAR), intrusion detection and alerting workflows
• Lead incident response: triage, forensics, root-cause analysis, reporting to regulators as required
• Automate security testing within CI/CD pipelines (SAST, DAST, container and infrastructure as code checks)
• Define and enforce identity and access management policies
• Collaborate with compliance teams to support audits and certifications
• Coach engineering teams on secure coding practices, facilitate security training and awareness programs
• Stay current on blockchain-specific threats, including wallet and key-management attacks, consensus-layer exploits, and exchange and custody vulnerabilities

Qualifications & Experience

• Bachelor’s or Master’s degree in Computer Science, Information Security or related field
• 3+ years’ experience in application/cloud security, ideally in regulated environments such as financial services, payments or digital assets
• Strong hands-on skills: threat modeling, vulnerability scanning tools, pen-testing frameworks, SIEMs, Kubernetes security
• Familiarity with blockchain fundamentals, crypto key management and wallet security, plus an understanding of consensus-layer and exchange/custody-related threats.
• Familiarity with global regulatory and compliance frameworks for financial services, payments and digital assets.
• Experience embedding security into Agile/DevOps workflows, infrastructure as code
• Relevant certifications desirable: CISSP, OSCP, CCSK, CISM, CRISC, AWS/Azure security specialty

Core Competencies

• Analytical problem-solving and strong attention to detail
• Excellent communication skills; able to translate technical risks into business impact for stakeholders
• Self-motivated, collaborative team player in a fast-paced, global environment
• Continuous learner, proactive in researching and applying new security technologies

Location:
Onsite - Singapore / Malaysia

About The Company:

Our client is on a mission to aggregate the entire crypto ecosystem and building a leading decentralized platform and one of the largest communities in the space. With billions in daily trading volume processed, security remains their highest priority. They are committed to delivering secure, high-performance infrastructure that empowers both users and partners in the fast-moving world of blockchain technology.

Position Overview:

We are seeking a Security Engineer to strengthen and scale the company’s security posture across cloud infrastructure and applications. You will work closely with infrastructure and product teams to design secure systems, implement robust controls, and proactively mitigate risks. This role is suited for someone with a strong defensive security background, deep technical expertise, and hands-on experience securing modern cloud environments.

Key Responsibilities:

• Design and implement security controls across cloud and application infrastructure
• Strengthen and maintain security posture across AWS environments
• Manage and evolve IAM systems, including roles, policies, and access governance
• Partner with engineering teams to embed security into system architecture and development workflows
• Identify vulnerabilities and implement mitigation strategies across infrastructure and applications

Job Requirements:

• 5+ years of experience in security engineering, infrastructure security, or related roles
• Strong defensive security background with hands-on experience in production environments
• Deep knowledge of AWS and securing cloud-native architectures
• Solid understanding of common cloud and Web2 application vulnerabilities and mitigation techniques
• Experience working closely with engineering teams to integrate security into development processes
• Strong problem-solving skills and ability to operate in complex, evolving environments

Nice to Have

• Experience with EDR and MDM solutions for endpoint visibility and response
• Prior experience in crypto environments (trading platforms, custody, or security infrastructure)
• Familiarity with regulatory and compliance frameworks (SOC 2, ISO 27001, DORA, NIST, CIS)
• Cloud security certifications (CCSP, CCSK, CISSP)
• Kubernetes or container security experience (CKS, CKA)

Grab the chance and don't lose it. Apply now!

https://nodeworthy.recruitee.com/o/security-engineer

• Assist in the planning, deployment, and enhancement of cybersecurity products and solutions across client environments.
• Support the implementation, configuration, and upgrade of security platforms, ensuring optimal performance and compliance with security best practices.
• Provide technical guidance and support to both internal teams and external clients on the effective use of the company’s cybersecurity solutions.
• Conduct product training sessions and knowledge sharing for clients and internal stakeholders to ensure proper usage and adoption.

Requirements:

• Diploma in IT or equivalent
• At least 2 years of hands-on experience with CyberArk within the IT, Information Security, or Cybersecurity industry.
• Strong technical troubleshooting and problem-solving skills.
• Ability to work independently as well as collaboratively in a team environment.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to hr@recruit-expert.com

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R1326740

Responsibility

1. Responsible for drafting and reviewing contracts, including formulating and revising the company's standard contract templates, as well as reviewing various business contracts, correspondence, and related documentation.

2. Participate in handling the company's legal disputes and litigation globally, involving but not limited to commercial disputes and intellectual property disputes, effectively protecting the company's interests.

3. Provide comprehensive legal and compliance support to ensure that the company's operations comply with relevant legal requirements, including but not limited to export control, taxation, intellectual property, and data compliance.

4. Opportunities for rotation in finance, legal, human resources, administration, supply chain, customer service, and after-sales departments.

Requirement

1. Bachelor’s degree or higher, with a background in law; must hold a legal professional qualification certificate.

2. Excellent written communication skills, comprehensive legal risk analysis abilities, and strong communication and negotiation skills.

3. Strong sense of responsibility, adherence to principles, meticulous work ethic, and resilience under pressure.

4. Fluency in English, able to work in English-speaking environment.

This role is an experienced Information Security Compliance subject matter expert who will take a lead role in improving our compliance and security program.  This position will focus on three areas: Audit/Compliance support, Vendor Risk Management and RFX (answering customer security questionnaires).  You will have excellent communication skills, a solid foundation in information security principles and an expertise in information security management systems as it relates to compliance with applicable frameworks.  Strong understanding of privacy laws and regulations like GDPR, CCPA/CPRA and other similar regulations.  This position reports to the Director of Platform Security.  

This opportunity is for you, if you are:

Excited to work across the many Tealium products and services

Empathetic, patient and passionate about helping Tealium improve its security posture

Constantly looking for security technological innovation opportunities

Driven to help customers accelerate their digital transformation

YOUR DAY TO DAY

• Support the maintenance of Tealium’s certifications: HIPAA, SOC2 Type 2, ISO 27001, ISO 27701, ISO 27018, TISAX Level 1

• Conduct Vendor Risk Management assessments of critical Tealium vendors

• Respond to customer information security RFX requests (security questionnaires)

WHAT YOU BRING TO TEALIUM

• You have 5+ years total experience in information security 

• You have 3+ years experience working with Cloud Hosting Environments such as AWS, Azure, GCP and others in a high traffic global business

• You have earned a bachelor’s degree in an Information Technology related field of study or equivalent experience; relevant, industry recognized security certification such as CISSP, CISA, CSSLP, or CRISC

• You have deep knowledge of information security principles and technologies such as Security Incident and Event Management (SIEM), intrusion prevention and detection (IPS/IDS), firewalls, proxies, web filters, email filters, web application firewalls, and end-point anti-virus, etc

• Familiarity with networking, operating systems, web applications, common techniques used by hackers/attackers and cloud technologies (i.e. IaaS, PaaS, SaaS) and cloud platforms (AWS, Azure etc)

• Experience with compliance frameworks such as SOX, HIPAA, SOC2, ISO 27001, ISO 27018, ISO 27701 are a must; familiarity with NIST 800-171 and 800-53, FedRAMP, HITRUST and PCI DSS is nice to have

• Excellent problem solving and analytical skills, as well as outstanding oral and written communication skills

• The ability to work in a fast-paced environment and the ability to deal with ambiguity

• Ability to handle multiple competing priorities and work well under minimal supervision

About the Role
We are looking for a passionate and driven Security Engineer to join our growing team, where you’ll play a key role in building secure, scalable, and high-performance software solutions. This is an exciting opportunity to work at the intersection of software engineering and cybersecurity, shaping how security is embedded into modern application development.

What You’ll Do

• Collaborate with a talented team of engineers to design and develop cutting-edge security software products
• Contribute to security operations, including monitoring, analysis, and incident response support
• Design and implement robust data security solutions, embedding security best practices across the development lifecycle
• Develop, enhance, and maintain applications with a strong focus on performance, scalability, and security
• Take ownership of software design, coding, testing, and deployment to deliver high-quality solutions
• Integrate security testing practices (static and dynamic analysis) into CI/CD pipelines
• Establish and uphold development standards, policies, and best practices
• Evaluate, implement, and integrate security tools and technologies to strengthen system defenses

Job Requirements

• Bachelor’s degree in computer science, Information Security, or related field.

• At least 2 years of hands-on experience in cybersecurity solution delivery. Candidates with development experience are also welcome to apply.

• Excellent client-facing communication and presentation skills

• Ability to explain complex technical concepts clearly

• Strong problem-solving and analytical thinking skills

• Self-starter, capable of working independently and managing multiple priorities in a fast-paced environment

• Comfortable working independently and collaboratively in a project team

About the Role:

We are seeking a hands-on Cyber Security Firewall Engineer to provide operational support and security platforms. The ideal candidate will be experienced in managing Fortinet FortiGate and Palo Alto Networks firewalls, with foundation in network security, policy management, and incident response.

Key Responsibilities:

Firewall Operations (Fortinet & Palo Alto)

• Manage firewall rules creation, change requests, rule optimization, NAT/VPN configuration and firmware upgrades.

• Monitor traffic, identify anomalies, and remediate security events.

• Maintain HA configurations, routing and logging integrations.

• Support audits and evidence collection for regulatory/compliance requirements.

Tripwire

• Administer policies, baselines, agents, alerts, and remediation workflows.

• Investigate integrity violations; tune rules to reduce false positives.

Imperva (DB Security/DAM)

• Configure security policies, signatures, profiles, and exceptions.

• Monitor application-layer attacks; tune rules to balance protection and usability.

• Support database activity monitoring policies and reporting where applicable.

• Security Monitoring & Incident Response

• Triage alerts conduct root-cause analysis, and coordinate remediation.

Required Qualifications:

Hands-on expertise with:

• Fortinet FortiGate (policies, VPN, routing, HA, SD-WAN, logging).

• Palo Alto Networks firewalls (policies, NAT, App-ID, User-ID, Panorama).

• Tripwire (Hice to Have).

• Imperva (Hice to Have).

• Strong understanding of networking fundamentals (TCP/IP, VLANs, routing, NAT, SSL/TLS, DNS ).

• Experience in incident response, change management, and documentation.

• Ability to work independently with a focus on accuracy, speed, and risk reduction.

Preferred Certifications (Nice to Have)

Fortinet NSE 4–7, Palo Alto PCNSA/PCNSE, Imperva Certified Professional.

Soft Skills

• Clear communication with stakeholders and change advisory boards.

• Structured problem-solving and risk-based decision-making.

• Ownership mindset with strong time management for a contract environment.

Deliverables & KPIs

• Firewall rules changes are accordance to requests.

• Successful completion of firmware upgrades and config backups with rollback plans.

• Updated Tickets, network diagrams, and change records.

• Handover documentation and knowledge transfer at contract end.

Tools & Environment

• FortiGate / FortiManager / FortiAnalyzer

• Palo Alto NGFW / Panorama

• Tripwire Enter

Working hours :

8:30am to 6pm (Monday to Friday) onsite, no hybrid option.

Responsibilities:

Endpoint Protection

·      Administer, operate, and maintain Symantec Endpoint Protection Manager or Defender or any other end point security solution.

·      Deploy, configure, and manage endpoint protection policies, including anti-malware, IPS, firewall, and device control

·      Generate security posture reports regularly to identify gaps in protection and manage the end-to-end lifecycle of the Symantec agent.

·      Perform upgrades and roll outs during weekend maintenance window

User Support & Operations

·      Provide Level 2 / Level 3support for incidents and service requests

·      Monitor endpoint security alerts, investigate incidents, and perform root cause analysis

IT Service Management

·      Understands ITIL processes for Incident, Problem, Change Management

·      Create and update tickets with detailed documentation and resolution steps

·      Maintain SLAs and ensure timely ticket resolution

Documentation & Knowledge Management

·      Create and maintain technical documentation, knowledge articles, and standard operating procedures (SOPs)

·      Maintain runbooks for common operational tasks

Required skills and qualifications:

·      Singaporeans By Birth Only(Public Sector Client)

·      A degree in Computer Science, Information Technology, IT Security or a related field with at least 2-4 yearsof work experience

·      At least 1 year of experience with SEPM / Defender

·      Experience with Host Intrusion Prevention & Detection (HIPS / HIDS)

·      Experience with Windows and/or Linux (RedHat) system administration

·      Able to prioritize multiple tasks in a dynamic working environment, with strong communication and interpersonal skills

Preferred skills and qualifications:

·      Knowledge of Microsoft Defender is a bonus

·      Experience with scripting programming languages (e.g. PowerShell, Python) for automation.

Job Description:

1. Security Monitoring & Incident Response:

• Monitor security alerts and events from SIEM, EDR, and other security tools.
• Investigate and triage security incidents, including malware, phishing, and
• unauthorized access attempts.
• Perform root cause analysis and recommend remediation actions.
• Escalate incidents based on severity and impact.

2. Threat Detection & Analysis:

• Analyze logs from servers, endpoints, network devices, and applications.
• Identify anomalies and potential threats using correlation rules and use cases.
• Support threat hunting activities to proactively detect hidden threats.

3. Security Tools & Technologies:

• Manage and optimize tools such as SIEM (e.g., Splunk), EDR, IAM, and vulnerability scanners.
• Assist in fine-tuning detection rules and reducing false positives.
• Support integration of new security technologies.

4. Vulnerability & Risk Management:

• Conduct vulnerability assessments and track remediation efforts.
• Work with system owners to address identified risks.
• Support risk assessments, especially for legacy systems and exceptions.

5. Compliance & Governance:

• Ensure adherence to security policies, standards, and baseline configurations.
• Support audits (internal/external), including evidence gathering and documentation.
• Assist in maintaining compliance with regulatory frameworks (e.g., ISO 27001, MAS TRM, NIST).

6. Configuration & Change Monitoring:

• Monitor critical system configuration changes.
• Validate compliance with hardening baselines across environments.
• Identify and report deviations with proper risk tracking.

7. Reporting & Documentation:

• Prepare incident reports, dashboards, and security metrics.
• Document playbooks, procedures, and use cases.
• Provide regular updates to stakeholders on security posture.

Requirements:

• Bachelor’s degree in Cybersecurity, Information Technology, or related field.
• 4–10 years of experience in a Security Operations or similar role.
• Experience in regulated environments. (e.g., financial services)
• Exposure taudit and compliance processes.

Technical Skills:

• Experience with SIEM tools (e.g., Splunk).
• Knowledge of Windows/Linux systems and Active Directory environments.
• Understanding of network security concepts (firewalls, IDS/IPS, VPNs).
• Familiarity with endpoint security and identity access management.
• Basic scripting skills (e.g., Python, PowerShell) are a plus.
• Security Knowledge.

Understanding of:

• Threat landscape and attack vectors.
• Security frameworks and standards.
• Incident response methodologies.
• Vulnerability management processes.

Soft Skills:

• Strong analytical and problem-solving skills.
• Good communication and stakeholder management.
• Ability to work under pressure in incident scenarios.
• Detail-oriented with strong documentation skills.

Preferred Skills and Experience:

• Certifications such as CompTIA Security+, CEH, GIAC, CISSP (for more senior candidates)

Project Security System Engineer [Commercial Project]

• Location: Office at Outram Road| Project will be Islandwide depending on assigned project
• Working Hours: Mon to Fri [830am – 6pm] Night and weekend works will be required depending on project requirements
• Salary: Basic up to $4500 + Transport $750 (car) or $400 (motorbike) or by reimbursement basis + HP by reimbursement basis

Overall Objective:

• Project Engineers will be responsible for leading and managing projects for security equipment installation, testing, commissioning and system programming in accordance to required standards.

Key Roles and Responsibilities:

• Lead and direct projects and ensure they are directed towards a common objective
• Engage and communicate with stakeholders to deliver project milestones and comply with strict deadlines
• Ensure client satisfaction and manage escalations, acting as point of contact to the client
• Ensure that the project delivers as-sold solution, remains within the baseline budget and is delivered on time whilst maintaining quality criteria and client satisfaction
• Coordinate activities of the project teams through task delegation, resource assignment and programme management
• Ensure proper documentation is in order
• Any other duties as assigned

Job Requirement:

• Minimum Diploma in Electronics & Communication Engineering or related field
• Preferably with 2 years’ relevant work experience in project management for security systems
• Technical knowledge on ELV, Networking and Security Systems (CCTV, Card Access, Alarm System) required

Cheong Yeat Long | R25145358

The Supreme HR Advisory Pte Ltd | EA 14C7279

Project Security Systems Engineer [Camps Project] X2

• Location Office at Outram Road| Project will be Islandwide depending on assigned project
• Working Hours: Mon to Fri [830am – 6pm] Night and weekend works will be required depending on project requirements
• Salary: Basic up to $4500 + Transport $750 (car) or $400 (motorbike) – must have own vehicle due to site conditions + HP by reimbursement basis

Overall Objective:

• Project Engineers will be responsible for leading and managing projects for security equipment installation, testing, commissioning and system programming in accordance to required standards.

Key Roles and Responsibilities:

• Lead and direct projects and ensure they are directed towards a common objective
• Engage and communicate with stakeholders to deliver project milestones and comply with strict deadlines
• Ensure client satisfaction and manage escalations, acting as point of contact to the client
• Ensure that the project delivers as-sold solution, remains within the baseline budget and is delivered on time whilst maintaining quality criteria and client satisfaction
• Coordinate activities of the project teams through task delegation, resource assignment and programme management
• Ensure proper documentation is in order
• Any other duties as assigned

Job Requirement:

• Minimum Diploma in Electronics & Communication Engineering or related field
• Preferably with 2 years’ relevant work experience in project management for security systems
• Technical knowledge on ELV, Networking and Security Systems (CCTV, Card Access, Alarm System) required

Cheong Yeat Long | R25145358

The Supreme HR Advisory Pte Ltd | EA 14C7279

• Security Test Engineer with good knowledge of ISO 21434 (Automotive Cybersecurity) and Autosar Security Concept.
• Responsible to validate and ensure the robustness of security mechanisms in Gateway (GW) automotive products to protect it against unauthorized access and cyber threats.
• The Role focuses on secure diagnostics and secure flashing ensuring Flash Data Security, Secure Boot validation, HSM, VKMS functionality, and cryptographic key management & encryption basics while verifying secure communication protocols.
• Must have Hands-on expertise in Vector CANoe, VTstudio, Vector HIL, CAPL Programming
• Knowledge of debugging and log analysis tools  

Responsibilities 

• Provide Level 1 and 2 support for assigned security projects, including onsite troubleshooting, root cause analysis, and detailed incident reporting.

• Implement and configure various security products, ensuring seamless integration with existing infrastructure.

• Create comprehensive documentation for project requirements, configurations, and operational procedures.

• Adhere to the project implementation lifecycle, ensuring timely and successful project delivery.

• Provide after-sales support, including product incident escalation and 24x7 technical support (on a rotational basis).

• Conduct user training sessions and knowledge transfer to empower users and enhance security awareness.

• Integrate security products with existing systems, ensuring optimal performance and security posture.
  

Job Requirements

• Degree in Computer Science, Computer Engineering, Information Engineering, or a related field.

• 1 - 5 years of experience in a security system integrator environment.

• Networking concepts, including TCP/IP, firewalls, switching, and routing.

• Practical experience setting up and managing Windows/Linux servers and virtual machines.

• Coding/scripting skills are desirable.

• Ability to provide after-hours and weekend/public holiday support as needed.

• Working experience and knowledge of system infrastructure, with a passion for exploring security products.

Roles & Responsibilities:

• Manage security solution operations, company security tasks (security inspections, campaigns, etc.)
• Security inspection tasks for SDSAP
• Security inspections and security-related tasks are carried out according to the security inspection schedule designated by the team.
• Providing technical support if customers encounter issues while operating security solutions(DRM, In-house solution).
• At the data center, asset inventory and procurement process tasks for SDSAP and SEC must be performed.
• Security asset house-keeping
• Support electronic solution operations, require regular meetings with customers.

Requirements:

• Diploma or Degree in Information Security or Information System or equivalent
• At least 1 year of experience in programming (coding & algorithm)
• Experienced in Windows and Linux Servers
• Good knowledge about IT system
• Good interpersonal skills
• Passion in IT security and technology
• Team player with high initiative, self-motivation and results-oriented mind-set
• Experienced in complex secured network design, VPN and WLAN implementation.
• Good communication, documentation, organizational and interpersonal skills
• Experience with networking, system administration and infrastructure architecture
• An employee with a high level of passion for work and a desire to work together for a long time.
• Work location: 61 TAI SENG AVENUE PRINT MEDIA HUB @ PAYA LEBAR IPARK

Product area

The Core team builds the technical foundation behind Google’s flagship products. We are owners and advocates for the underlying design elements, developer platforms, product components, and infrastructure at Google. These are the essential building blocks for excellent, safe, and coherent experiences for our users and drive the pace of innovation for every developer. We look across Google’s products to build central solutions, break down technical barriers and strengthen existing systems. As the Core team, we have a mandate and a unique opportunity to impact important technical decisions across the company.

Job description

There's no such thing as a "safe system" - only safer systems. Our Security team works to create and maintain the safest operating environment for Google's users and developers. As a Security Engineer, you help protect network boundaries, keep computer systems and network devices hardened against attacks and provide security services to protect highly sensitive data like passwords and customer information. Security Engineers work directly with network equipment and actively monitor our systems for attacks and intrusions. You also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

You use your industry experience to own and drive the resolution of complex security incidents, policy questions and technical security issues.

Additional job description

The new Singapore-based team will be dedicated to scaling our operations and risk reduction efforts through advanced automation and remediation. Our mission is to safeguard billions of users by efficiently triaging external security reports and proactively eliminating vulnerabilities across Google's products and infrastructure. We aim to evolve into a self-sustaining, AI-driven operation that provides deep insights into vulnerability trends while fostering a community of security researchers.

Qualifications

Job responsibilities

• Review designs and look for vulnerabilities, both with one-time reviews and long-term engagements. Look for vulnerabilities with techniques including reverse engineering, fuzzing, and static analysis.
• Drive large-scale remediation efforts that eliminate entire vulnerabilities across Google’s products and infrastructure.
• Guide the strategic development of agents and infrastructure to automate vulnerability handling, triage, and conduct variant analysis to reduce manual workloads.

Minimum qualifications

• Bachelor's degree or equivalent practical experience.
• 5 years of experience with security assessments or security design reviews or threat modeling.
• 5 years of experience with security engineering, computer and network security and security protocols.
• 5 years of coding experience in one or more general purpose languages.
  

Preferred qualifications

• 1 year of experience in leading technical risk analysis in an enterprise environment.
• Experience building or deploying automated tools (e.g., large language model based agents) for security workflows such as triage automation or bug fixing.
• Experience with cross-functional or cross-product teams.
• Experience consulting on security/security protocols.
• Excellent communication skills.