Qube Research & Technologies

Senior Product Security Engineer

Hong Kong SAR China · Work style not stated · Full-time

Posted over 6 months ago: check it’s still open

Apply on the employer’s site ↗See how well you match this job

You apply directly with the employer. ROLIVA does not submit applications from this page and is not the employer.

About the role

Description from the employer’s posting. Check the employer’s page for the current version.

EmployerQube Research & Technologies
LocationHong Kong SAR China
Work styleWork style not stated
Employment typeFull-time
Employer posted1 year ago

Qube Research & Technologies (QRT) is a global quantitative and systematic investment manager, operating in all liquid asset classes across the world. We are a technology and data driven group implementing a scientific approach to investing. Combining data, research, technology, and trading expertise has shaped our collaborative mindset, which enables us to solve the most complex challenges. QRT’s culture of innovation continuously drives our ambition to deliver high quality returns for our investors.

Your future role within QRT

You will join the Security team, working closely with Software Engineers and Infrastructure teams to embed security into the design, development, and operation of systems across cloud services, business applications, and core infrastructure.

Support the implementation and operation of product security controls across cloud services, core infrastructure, and business applications on Windows and Linux platforms
Work with engineering teams to integrate security into system design and development, applying practical approaches suitable for fast-moving environments
Contribute to secure software development practices, including supporting security reviews across languages such as Python, C++, Rust, Go, and Kotlin/Java
Perform threat modelling, vulnerability assessments, and security code reviews with guidance from senior team members
Assist with integrating and operating security tooling (e.g., SAST, DAST, dependency scanning) within CI/CD pipelines and runtime environments
Identify security risks and contribute to remediation and mitigation plans with engineering teams
Perform vendor security reviews to assess third-party security practices against internal standards
Build your product security knowledge and share learnings with peers across engineering teams

Show full description

Requirements:

3–5 years of experience in product security, application security, software engineering, or a related role
Hands-on experience with secure coding practices and at least one of: Python, C++, Rust, Go, Kotlin/Java
Solid technical foundation in software development, system architecture, or infrastructure, with a strong interest in security
Working knowledge of security principles and common vulnerabilities affecting software, cloud platforms, and business applications
Experience securing Windows and/or Linux-based systems
Practical experience with at least one cloud platform (AWS or Microsoft Azure), ideally in hybrid environments
Familiarity with threat modelling, vulnerability management, and risk assessment concepts
Experience using or integrating security scanning tools into development workflows and/or CI/CD pipelines
Strong problem-solving skills, clear communication, and willingness to learn in a fast-paced environment
Exposure to low-latency or performance-sensitive systems
Experience in financial services and/or regulated environments
Interest in automation and security tooling development

QRT is an equal opportunity employer. We welcome diversity as essential to our success. QRT empowers employees to work openly and respectfully to achieve collective success. In addition to professional achievement, we are offering initiatives and programs to enable employees achieve a healthy work-life balance.

See how well you match this job Apply on the employer’s site ↗

Check your resume against this job Free, no sign-up. Nothing you paste is stored.

Staying safe while you apply

Never pay to apply, interview or accept an offer. ROLIVA never asks you for payment to apply to a job.
Apply only through the official “Apply on the employer’s site” button, on the employer’s own site, and check that a recruiter’s email uses that employer’s own domain rather than a free email address.
Be cautious of an offer made with no real interview, or pressure to decide quickly or share financial details early.

Does something look wrong with this listing? Use “Report broken link” in the role details, or read ROLIVA’s full job-safety guidance ↗.

Preparing for this role with ROLIVA

Check the fit.
Compare the requirements with the experience you have confirmed, including gaps.
Prepare honestly.
Build interview stories and application drafts from your own evidence.
Keep track.
Save the role and record your own application status and follow-ups.

Create a free workspace or log in.