Senior AppSec & Cloud Security Architect - Global Trading Firm

Senior AppSec & Cloud Security Architect - Global Trading Firm - J12319 (Hong Kong)

About the Client: We are partnering with a highly successful, global quantitative investment manager. They operate a technology- and data-first environment, utilizing a scientific approach to investing across global liquid asset classes. Their engineering culture is collaborative, low-ego, and focused on solving complex challenges at scale. Security here is viewed as a critical enabler of the business, not a blocker.

The Role & Landscape: You will take a lead role in protecting a sophisticated, low-latency trading infrastructure spanning AWS, on-prem, and colocation environments. This is a purely defensive, architecture-focused role.

- Design and validate security controls and reference architectures across hybrid environments.

- Conduct in-depth threat modeling and technical risk assessments on new and existing systems.

- Perform deep-dive security code reviews and work directly with developers on remediation prior to release.

- Embed security controls seamlessly into the SDLC, partnering with engineering to resolve design risks early.

- Provide expert guidance on application, network, and cloud platform security.

What We Are Looking For:

- 5 to 10 years of dedicated experience in product security, application security, or security architecture.

- Proven expertise in threat modeling, risk assessment, and secure design reviews.

- A strong technical foundation in software development; you must be comfortable reading code and explaining vulnerabilities clearly to engineers.

- Deep knowledge of application, network, and cloud (AWS) security vulnerabilities.

- The ability to translate technical security risks into clear business risks for various stakeholders.

- Previous experience within Financial Services, particularly trading or quantitative environments, is highly preferred but not strictly mandatory.

- Note: This role is focused on architecture and code review; offensive security/penetration testing experience is not required.

Why Apply To This Role:

- High Impact: Secure the core infrastructure of a major global trading operation.

- Business Alignment: Work in an environment where security is integrated as an enabler, not an afterthought.

- Technical Depth: Engage deeply with complex systems across cloud and colocation environments without the distraction of red-team activities.

- Culture: Join a humble, hungry, and highly collaborative team of top-tier engineers.sss

If this outstanding opportunity sounds like your next career move, please send your resume in Word format to Danny Kwan at resume(at)pinpointasia(dot)com and put Senior AppSec & Cloud Security Architect - Global Trading Firm - J12319 in the subject header. Data provided is for recruitment purposes only.