Officer, Application Security, LME

We are seeking an Officer – Application Security to support secure software development practices for HKEX systems serving London Metal Exchange (LME).

This role involves:

• Supporting secure SDLC initiatives, including static code analysis, dependency analysis, and secure design reviews
• Maintaining and enhancing SonarQube and integrating security checks into CI/CD pipelines
• Producing and managing SBOMs for in-house and third-party developed applications
• Performing application and API security testing, including security testing during deployment
• Supporting vulnerability remediation by working closely with development teams
• Participating in threat modelling and security architecture discussions
• Assisting in penetration testing and red teaming activities under senior guidance
• Supporting security of applications running on Kubernetes platforms, including OpenShift
• Working with global stakeholders, including LME, in English-speaking environments

Requirements:

• 1–3 years of experience in application security, secure software development, or cyber security
• Understanding of web application and API security (OWASP Top 10 / OWASP API Top 10)
• Familiarity with DevSecOps practices and tools, such as SonarQube and CI/CD pipelines
• Basic understanding of software supply chain security and SBOM concepts
• Exposure to Kubernetes or OpenShift environments is a strong advantage
• Strong interest in pentesting, vulnerability research, and attacker techniques
• Experience in a foreign financial institution environment is a plus
• Strong self-learning capability, hands-on attitude, and passion for technology
• Good spoken and written English is required