Senior Product Security Engineer

Location: Hong Kong Qube Research & Technologies (QRT) is a global quantitative and systematic investment manager, operating in all liquid asset classes across the world. We are a technology and data driven group implementing a scientific approach to investing. Combining data, research, technology, and trading expertise has shaped our collaborative mindset, which enables us to solve the most complex challenges. QRT’s culture of innovation continuously drives our ambition to deliver high quality returns for our investors. Your future role within QRT You will join the Security team, working closely with Software Engineers and Infrastructure teams to embed security into the design, development, and operation of systems across cloud services, business applications, and core infrastructure. Support the implementation and operation of product security controls across cloud services, core infrastructure, and business applications on Windows and Linux platforms Work with engineering teams to integrate security into system design and development, applying practical approaches suitable for fast-moving environments Contribute to secure software development practices, including supporting security reviews across languages such as Python, C++, Rust, Go, and Kotlin/Java Perform threat modelling, vulnerability assessments, and security code reviews with guidance from senior team members Assist with integrating and operating security tooling (e.g., SAST, DAST, dependency scanning) within CI/CD pipelines and runtime environments Identify security risks and contribute to remediation and mitigation plans with engineering teams Perform vendor security reviews to assess third-party security practices against internal standards Build your product security knowledge and share learnings with peers across engineering teams Requirements: 3–5 years of experience in product security, application security, software engineering, or a related role Hands-on experience with secure coding practices and at least one of: Python, C++, Rust, Go, Kotlin/Java Solid technical foundation in software development, system architecture, or infrastructure, with a strong interest in security Working knowledge of security principles and common vulnerabilities affecting software, cloud platforms, and business applications Experience securing Windows and/or Linux-based systems Practical experience with at least one cloud platform (AWS or Microsoft Azure), ideally in hybrid environments Familiarity with threat modelling, vulnerability management, and risk assessment concepts Experience using or integrating security scanning tools into development workflows and/or CI/CD pipelines Strong problem-solving skills, clear communication, and willingness to learn in a fast-paced environment Exposure to low-latency or performance-sensitive systems Experience in financial services and/or regulated environments Interest in automation and security tooling development QRT is an equal opportunity employer. We welcome diversity as essential to our success. QRT empowers employees to work openly and respectfully to achieve collective success. In addition to professional achievement, we are offering initiatives and programs to enable employees achieve a healthy work-life balance.