Security Engineer / Manager

About the role

Bowtie is Hong Kong's first virtual insurer, regulated by the HKIA. The Security Engineer / Manager will own the end‑to‑end technical security posture, covering application, cloud and infrastructure layers, and serve as the main point of contact for auditors, regulators and partner assessments.

Key responsibilities

• Lead selection, deployment and operation of a centralized SIEM, triage alerts and drive remediation.
• Design and implement privileged access management (PAM) workflows for production and super‑admin consoles.
• Own identity architecture, including IdP, SSO and SCIM integrations.
• Integrate security controls into the SDLC, enforce code‑review guardrails and manage supply‑chain risk.
• Maintain cloud security posture across AWS services (IAM, SCP, GuardDuty, CloudTrail, KMS) and oversee endpoint and SaaS protections.
• Define and track a risk register, set severity definitions, remediation SLOs and report on security posture.
• Run internal security exercises and coordinate external penetration‑test rotations.
• Lead joint forums with SRE and IT teams, create incident runbooks and manage audit and regulatory engagements.

Required profile

• Hands‑on experience with application security, SDLC integration and supply‑chain investigations.
• Proven ability to deploy a SIEM end‑to‑end and implement PAM solutions.
• Deep knowledge of AWS security services and identity management protocols.
• Familiarity with Hong Kong financial services regulatory frameworks (HKIA guidelines, cyber‑risk standards).
• Strong written communication and documentation skills.

Required skills

• SIEM deployment and operation
• Privileged Access Management (PAM)
• Identity Provider (IdP), SSO, SCIM
• AWS IAM, Service Control Policies, GuardDuty, CloudTrail, KMS
• Python or TypeScript scripting for automation
• NIST CSF, ISO/IEC 27001 frameworks
• CNAPP (e.g., Orca), EDR, vulnerability management tools
• Cloudflare Zero Trust / Gateway / DLP
• Google Workspace administration, MDM/BYOD at scale
• Relevant certifications (CISSP, CISM, AWS Security Specialty, OSCP) are a plus