OneConnect Financial Technology Hiring! Full Time Security Architect in Federal Territory of Kuala Lumpur - Ricebowl

Mission

Lead the design and implementation of robust security architectures for cloud-native applications and financial systems, ensuring alignment with MAS TRM, PCI DSS, and Zero Trust frameworks across global operations.

---

Core Responsibilities

1. Threat-Driven Architecture Design

- Develop security blueprints for web/mobile applications (Android/iOS), microservices, and hybrid cloud environments (AWS/Azure).

- Integrate threat modeling (e.g., STRIDE, PASTA) into SDLC for critical financial products.

2. Advanced Security Engineering

- Architect and implement:

- *Runtime Protection*: RASP, container security, API gateways with WAF/IPS.

- *Cryptography Systems*: PKI, HSM integration, key lifecycle management.

- *Mobile Hardening Suites*: Anti-tampering, code obfuscation, SSL pinning solutions.

3. Offensive Security Leadership

- Oversee red team operations targeting payment gateways, core banking APIs, and mobile platforms.

- Establish vulnerability discovery automation pipelines (SAST/DAST/IAST).

4. Compliance & Governance

- Translate MAS TRM, GDPR, and China DSL into technical controls.

- Lead security certifications (ISO 27001, SOC 2) for cloud deployments.

5. Innovation Roadmap

- Drive adoption of:

- LLM security guardrails for AI-powered financial services

- Confidential computing for sensitive data processing

Experience Requirements

- 7+ years in security architecture roles with 3+ years in financial services.

- Proven track record designing security for:

- High-TPS systems (>500 transactions/sec)

- Mobile banking apps with >8M users

- Portfolio demonstrating:

- Reduction of critical vulnerabilities by ≥40% YOY

- Security architecture diagrams for cloud migration projects

---

Leadership Expectations

- Mentor security engineers on advanced penetration testing (e.g., WebSockets exploitation, blockchain MEV attacks).

- Interface with CISO/CTO on cyber risk quantification (FAIR model) and tech debt management.

- Develop security standards for emerging tech: CBDC, embedded finance, BNPL platforms.