Senior Security Engineer

About the Company
We're working with a leading global quantitative investment firm looking to add hands-on Security Engineers across Sydney and Hong Kong

About the Role
This is not a traditional SOC, GRC or purely application security position. You'll work within a global security engineering function responsible for the infrastructure and security controls protecting a highly technical, performance-sensitive environment.

Responsibilities
Operate and improve the firm's core security platforms across on-premise and cloud environments.Responsibilities will span firewalls and network security, SASE/CASB, identity and access management, endpoint protection, vulnerability management and cloud security controls.Troubleshoot when a security control causes an infrastructure, connectivity, authentication or performance problem.Investigate the issue end-to-end, understand what's happening underneath the security product and find a practical solution.Work closely with Infrastructure, Cloud and Engineering teams to automate operational processes, improve observability and ensure security controls protect the organisation without unnecessarily impacting performance or productivity.

You'll ideally have 5+ years of hands-on Security Engineering or Security Platform experience and broad exposure across several security domains rather than specialising exclusively in one.

Required Skills
5+ years in hands-on Security Engineering / Security Platform EngineeringNetwork Security: Strong firewall fundamentals including stateful/stateless inspection, L3–L7 policies, application signatures, proxies and traffic flowsSASE / CASB: Hands-on experience operating modern SASE, secure web gateway, proxy or CASB technologiesIdentity & Access: Strong understanding of Active Directory, identity providers, SSO, authentication vs authorisation and access controlsEndpoint Security: Experience operating EDR/endpoint protection and independently troubleshooting security-related performance or compatibility issuesWindows: Comfortable troubleshooting user accounts, authentication, permissions, services and Windows security/event logsLinux: Strong enough Linux fundamentals to troubleshoot processes, services, permissions, networking and logsNetworking: Solid TCP/IP, DNS, HTTP/S and TLS fundamentals, including the TLS handshakePacket Analysis: Comfortable using tcpdump, Wireshark or similar tools to diagnose network/security issuesVulnerability Management: Recent hands-on experience assessing and responding to CVEs, zero-days/n-days and coordinating remediationSecurity Platforms: Broad experience across network, identity, endpoint, vulnerability and cloud security rather than deep specialisation in only one areaAutomation: Python, PowerShell or Bash experience used to automate security operations and reduce manual toilTroubleshooting: Strong root-cause mentality able to investigate issues across the security product, endpoint, network, identity and underlying infrastructureMindset: Proactive and pragmatic; focused on fixing underlying problems while balancing security with business operability

Ideally you hav experience in a highly technical global environment where security works directly alongside infrastructure and software engineering.
It's an opportunity to develop genuine breadth across security infrastructure while working on complex systems where reliability, performance, automation and security all matter.