# Officer, Application Security, LME

**Company**: HKEX
**Location**: Shenzhen
**Experience**: entry
**Job type**: full-time
**Category**: IT
**Industry**: Finance

**Apply**: https://hkex.wd3.myworkdayjobs.com/en-US/HKEXCareerPage/job/CN-Shenzhen-HyQ/Officer--Junior-Systems-Engineer--LME-Engineering_R003359?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_cd61540d-829

## Description

We are seeking an Officer – Application Security to support secure software development practices for HKEX systems serving London Metal Exchange (LME).

This role involves:

- Supporting secure SDLC initiatives, including static code analysis, dependency analysis, and secure design reviews

- Maintaining and enhancing SonarQube and integrating security checks into CI/CD pipelines

- Producing and managing SBOMs for in-house and third-party developed applications

- Performing application and API security testing, including security testing during deployment

- Supporting vulnerability remediation by working closely with development teams

- Participating in threat modelling and security architecture discussions

- Assisting in penetration testing and red teaming activities under senior guidance

- Supporting security of applications running on Kubernetes platforms, including OpenShift

- Working with global stakeholders, including LME, in English-speaking environments

Requirements:

- 1–3 years of experience in application security, secure software development, or cyber security

- Understanding of web application and API security (OWASP Top 10 / OWASP API Top 10)

- Familiarity with DevSecOps practices and tools, such as SonarQube and CI/CD pipelines

- Basic understanding of software supply chain security and SBOM concepts

- Exposure to Kubernetes or OpenShift environments is a strong advantage

- Strong interest in pentesting, vulnerability research, and attacker techniques

- Experience in a foreign financial institution environment is a plus

- Strong self-learning capability, hands-on attitude, and passion for technology

- Good spoken and written English is required

## Skills

### Required
- application security
- secure software development
- cyber security
- DevSecOps
- SonarQube
- CI/CD pipelines
- SBOMs
- API security testing
- Kubernetes
- OpenShift

### Nice to have
- pentesting
- vulnerability research
- attacker techniques
- foreign financial institution environment

---

Source: [Apply at hkex.wd3.myworkdayjobs.com](https://hkex.wd3.myworkdayjobs.com/en-US/HKEXCareerPage/job/CN-Shenzhen-HyQ/Officer--Junior-Systems-Engineer--LME-Engineering_R003359?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)