Officer Application Security Lme

**Location:** CN-Shenzhen-HyQ **Shift:** Standard - 40 Hours (China) **Scheduled Weekly Hours:** 40 **Worker Type:** Permanent **Job Summary:** The Officer – Application Security supports secure software development practices for HKEX systems serving London Metal Exchange (LME). This role is ideal for a technically strong junior engineer seeking hands on experience in application security, secure SDLC and Kubernetes security within a financial market infrastructure. **Job Duties:** **Key Responsibilities** * Support **secure SDLC initiatives**, including static code analysis, dependency analysis and secure design reviews * Maintain and enhance **SonarQube** and integrate security checks into CI/CD pipelines * Assist in producing and managing **SBOMs** for in‑house and third‑party developed applications * Perform **application and API security testing**, including security testing during deployment * Support vulnerability remediation by working closely with development teams * Participate in **threat modelling** and security architecture discussions * Assist in **penetration testing and red teaming activities** under senior guidance * Support security of applications running on **Kubernetes platforms, including OpenShift** * Work with global stakeholders, including LME, in **English‑speaking environments** **Required Skills & Experience** * 1–3 years of experience in **application security, secure software development or cyber security** * Understanding of **web application and API security** (OWASP Top 10 / OWASP API Top 10) * Familiarity with **DevSecOps practices and tools**, such as SonarQube and CI/CD pipelines * Basic understanding of **software supply chain security and SBOM concepts** * Exposure to **Kubernetes or OpenShift** environments is a strong advantage * Strong interest in **pentesting, vulnerability research and attacker techniques** * Experience in a **foreign financial institution environment** is a plus * Strong self‑learning capability, hands‑on attitude and passion for technology * Good spoken and written **English** is required **Company Introduction:** ITD SZ 港交所科技（深圳）有限公司，是2016年12月28日于深圳市前海自贸区成立的外商独资企业。 作为港交所的技术子公司，港交所科技（深圳）有限公司主要是为集团及其附属公司提供计算机软件、计算机硬件、信息系统、云存储、云计算、物联网和计算机网络的开发、技术服务、技术咨询、技术转让；经济信息咨询、企业管理咨询、商务信息咨询、商业信息咨询、信息系统设计、集成、运行维护；数据库管理、大数据分析；以承接服务外包方式提供系统应用管理和维护、信息技术支持管理、数据处理等信息技术和业务流程外包服务。