Job Description

We're working with a leading global quantitative investment firm looking to add hands-on Security Engineers across Sydney and Hong Kong

n

About the Role

n

This is not a traditional SOC, GRC or purely application security position. You'll work within a global security engineering function responsible for the infrastructure and security controls protecting a highly technical, performance-sensitive setting.

n

Responsibilities

n

n
- Operate and improve the firm's core security platforms across on-premise and cloud environments.
n
- Responsibilities will span firewalls and network security, SASE/CASB, identity and access management, endpoint protection, vulnerability management and cloud security controls.
n
- Troubleshoot when a security control causes an infrastructure, connectivity, authentication or performance problem.
n
- Investigate the issue end-to-end, understand what's happening underneath the security product and find a practical solution.
n
- Work closely with Infrastructure, Cloud and Engineering teams to automate operational processes, improve observability and ensure security controls protect the organisation without unnecessarily impacting performance or productivity.
n

n

You'll ideally have 5+ years of hands-on Security Engineering or Security Platform experience and broad exposure across several security domains rather than specialising exclusively in one.

n

Required Skills

n

n
- 5+ years in hands-on Security Engineering / Security Platform Engineering
n
- Network Security: Strong firewall fundamentals including stateful/stateless inspection, L3-L7 policies, application signatures, proxies and traffic flows
n
- SASE / CASB: Hands-on experience operating modern SASE, secure web gateway, proxy or CASB technologies
n




- Identity & Access: Strong understanding of Active Directory, identity providers, SSO, authentication vs authorisation and access controls
n
- Endpoint Security: Experience operating EDR/endpoint protection and independently troubleshooting security-related performance or compatibility issues
n
- Windows: Comfortable troubleshooting user accounts, authentication, permissions, services and Windows security/event logs
n
- Linux: Strong enough Linux fundamentals to troubleshoot processes, services, permissions, networking and logs
n
- Networking: Solid TCP/IP, DNS, HTTP/S and TLS fundamentals, including the TLS handshake
n
- Packet Analysis: Comfortable using tcpdump, Wireshark or similar tools to diagnose network/security issues
n
- Vulnerability Management: Recent hands-on experience assessing and responding to CVEs, zero-days/n-days and coordinating remediation
n
- Security Platforms: Broad experience across network, identity, endpoint, vulnerability and cloud security rather than deep specialisation in only one area
n
- Automation: Python, PowerShell or Bash experience used to automate security operations and reduce manual toil
n
- Troubleshooting: Strong root-cause mentality able to investigate issues across the security product, endpoint, network, identity and underlying infrastructure
n
- Mindset: Proactive and pragmatic; focused on fixing underlying problems while balancing security with business operability
n

n

Ideally you hav experience in a highly technical global environment where security works directly alongside infrastructure and software engineering.

n

It's an opportunity to develop genuine breadth across security infrastructure while working on complex systems where reliability, performance, automation and security all matter.

📌 Senior Security Engineer (New South Wales)
🏢 Tribus
📍 New South Wales