About the Client: We are partnering with a highly successful, global quantitative investment manager. They operate a technology- and data-first environment, utilizing a scientific approach to investing across global liquid asset classes. Their engineering culture is collaborative, low-ego, and focused on solving complex challenges at scale. Security here is viewed as a critical enabler of the business, not a blocker.

The Role & Landscape: You will take a lead role in protecting a sophisticated, low-latency trading infrastructure spanning AWS, on-prem, and colocation environments. This is a purely defensive, architecture-focused role.

1. Design and validate security controls and reference architectures across hybrid environments.
2. Conduct in-depth threat modeling and technical risk assessments on new and existing systems.
3. Perform deep-dive security code reviews and work directly with developers on remediation prior to release.
4. Embed security controls seamlessly into the SDLC, partnering with engineering to resolve design risks early.
5. Provide expert guidance on application, network, and cloud platform security.

What We Are Looking For:

1. 5 to 10 years of dedicated experience in product security, application security, or security architecture.
2. Proven expertise in threat modeling, risk assessment, and secure design reviews.
3. A strong technical foundation in software development; you must be comfortable reading code and explaining vulnerabilities clearly to engineers.
4. Deep knowledge of application, network, and cloud (AWS) security vulnerabilities.
5. The ability to translate technical security risks into clear business risks for various stakeholders.
6. Previous experience within Financial Services, particularly trading or quantitative environments, is highly preferred but not strictly mandatory.
7. Note: This role is focused on architecture and code review; offensive security/penetration testing experience is not required.

Why Apply To This Role:

1. High Impact: Secure the core infrastructure of a major global trading operation.
2. Business Alignment: Work in an environment where security is integrated as an enabler, not an afterthought.
3. Technical Depth: Engage deeply with complex systems across cloud and colocation environments without the distraction of red-team activities.
4. Culture: Join a humble, hungry, and highly collaborative team of top-tier engineers.sss

If this outstanding opportunity sounds like your next career move, please submit through "Apply Now" or send your resume in Word format to Danny Kwan at resume@pinpointasia.com and putSenior AppSec & Cloud Security Architect - Global Trading Firm - J12319 in the subject header.

Data provided is for recruitment purposes only.

________________________________________________

Headquartered in Hong Kong, Pinpoint Asia is the go-to Specialist Firm for Technology Recruitment

We are a team of specialist tech recruiters (many of our recruiters come from an IT background), and we serve a wide range of clients, all the way from tech startups (especially FinTech) to some of the top Financial Institutions on Wall Street and several other large-scale enterprises in other industries.

Our significant market reputation and status as the leading search firm for many of our clients is a direct result of our strong industry relationships, intimate understanding of the marketplace, and proven ability to deliver results.

Our vision is to help companies hire smarter and help job seekers get closer to their career aspirations.

To see all our open jobs, please reach out to us at https://pinpointasia.com/job-search/ (EA License #79256)

We are also seeking top-calibre candidates for the following exciting roles:

1) Prime Middle Office Manager, Global Investment Bank - J13130

2) Business Analyst Regulatory Reporting - Top-tier Investment Bank - J13133

3) Wealth Manager / Senior Relationship Manager – Regional Multi-Family Office - J13217