Senior Security Engineer (AWS Cloud)
On-siteHong Kong, Hong Kong
Job Summary
Proactively identify security gaps, risks, and inefficiencies across cloud and on-premise environments, independently leading security initiatives from proposal through execution. Own and manage cloud-native security monitoring, threat detection, posture management, and a centralized identity and access management platform, enforcing least-privilege principles and encryption policies for data at rest and in transit. Design and enforce server hardening standards, conduct vulnerability management lifecycles including scanning and remediation coordination, and develop automation scripts to streamline security processes. Participate in incident response activities, investigate security incidents, and conduct root cause analysis. This highly autonomous role requires strong independent judgment and cross-functional collaboration with Cloud, DevOps, and engineering teams, with a primary focus on AWS cloud security and secondary coverage of data center infrastructure.
Required Qualifications
- 5+ years of experience in cloud security, with working knowledge of on-premise/data center security
- Strong hands-on experience with AWS as your primary cloud platform
- Experience with infrastructure & cloud architecture, development, support, and troubleshooting
- Demonstrated ability to work independently with strong ownership — identifying problems, proposing solutions, and driving initiatives with minimal supervision
- Strong cross-functional collaboration skills, particularly with infrastructure, DevOps, and engineering teams
- Hands-on experience with identity and access management platforms, including access governance
- Experience with security posture management and assessment tools
- Understanding of compliance frameworks (ISO 27001, SOC 2, PCI-DSS)
- Solid understanding of server operating systems (Linux, Windows), including hardening, patching, and baseline implementation
- Strong analytical and problem-solving skills, with excellent cross-functional communication
Desired Qualifications
- Experience with additional cloud platforms (Azure, GCP)
- Familiarity with container orchestration security (network policies, access controls, policy enforcement)
- Proficiency in scripting and automation languages
- Experience with secrets management solutions
- Knowledge of Zero Trust architecture and conditional access / risk-based authentication
- Familiarity with emerging technologies (e.g. web3/blockchain)
- Relevant security certifications (e.g. CISSP, CEH, cloud security certifications) or equivalent experience
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.