Cyber Security Engineer at Mox Bank in Hong Kong

Description

Responsibilities

• Writing and maintaining scripts in Python, Bash, or similar languages to automate routine security tasks and operational workflows.
• Supporting security tools within CI/CD pipelines, including SAST, DAST, secrets detection, software composition analysis, and vulnerability triaging.
• Working with Git, source control practices, pull requests, and basic software delivery workflows to manage internal security tooling and infrastructure code.
• Foundational exposure to AWS cloud concepts, IAM roles, infrastructure-as-code, configuration drift monitoring, and cloud security hygiene.
• Maintaining internal systems, documentation, dependencies, and automation solutions so that cybersecurity tooling remains reliable, current, and production-aligned.
• Using automation tools, APIs, webhooks, and AI-assisted techniques responsibly to improve speed, accuracy, and operational efficiency.

Skills, Knowledge and Expertise

• Scanner Operations: Assist in the day-to-day administration and health checks of automated security tools embedded in our developer pipelines, including SAST, DAST, and Software Composition Analysis.
• Secrets detection: Monitor automated pipelines for exposed secrets, API keys, and credentials, and trigger rapid remediation when alerts occur.
• Vulnerability triage: Review automated scan results, help identify false positives, and guide development squads on baseline remediation steps.

• Security Scripting: Write clean, documented scripts, primarily in Python or Bash, to automate routine security checks, log aggregation, and administrative tasks.
• Alert integration: Maintain and optimize webhook-based messaging pipelines that push critical security alerts into squad and team collaboration channels.

• Static Code Analysis: Monitor and review configuration scans on Infrastructure-as-Code templates to identify misconfigured cloud storage, over-privileged security groups, or unencrypted assets before they reach production.
• Drift Monitoring: Support the team in tracking cloud configuration drift, helping identify when manual modifications bypass our GitOps pipelines.

• Internal Tool Upkeep: Manage the routine maintenance, performance health, and patching of internally built applications, scripts, and automation solutions developed by the cybersecurity engineering (CSE) squad.
• Dependency & Package Management: Monitor and update code dependencies, libraries, and base container images for internal cyber infrastructure to prevent security vulnerabilities within our own toolset (e.g., managing Dependabot alerts for internal repos).
• Documentation: Maintain up-to-date documentation, deployment guides, runtime instructions, and README files for all internal systems and automated code solutions to ensure team continuity.
• Infrastructure-as-Code Versioning: Ensure internal cybersecurity testing environments and infrastructure deployments match production configurations and are correctly tracked using Git version control.

• IAM Audit Assistance: Support the Senior IAM Engineer by executing routine, automated checks on cloud access roles, ensuring orphaned accounts are flagged for deletion.
• Evidence Gathering Support: Help package automated security report outputs and scanning metrics to pass to the Governance team for regulatory review.

• Automation-first execution: Identify, design, and implement opportunities to replace repetitive manual security tasks, data compilation, and alert triage with scalable scripts, code, or automated playbooks.
• Process and tool optimization: Review workflows, handoffs, and security tooling configurations to reduce operational friction, remove system noise, and improve the effectiveness of Mox’s security stack.
• Secure AI augmentation: Use AI, machine learning, and LLM assistants responsibly to accelerate script generation, log analysis, pattern matching, threat intelligence summaries, and draft reporting while maintaining internal data classification requirements.

• Optimizer mindset: Proactively look for ways to make existing processes faster, cleaner, more reliable, and less manual.
• AI & Prompt Literacy: Practical comfort and developing fluency in utilizing modern AI-powered coding assistants, analytics platforms, and conversational LLMs to securely enhance technical speed, analytical accuracy, and delivery output.
• Agile tooling familiarity: Basic exposure to automation tools, APIs, webhooks, or scripting patterns that help security systems communicate and share data.

About Mox Bank