{"id":552044,"url":"https://alion.io/job/bowtie-security-engineer-manager","title":"Security Engineer / Manager","company":{"id":180185,"name":"Bowtie","domain":"bowtie.com.hk","url":"https://alion.io/company/bowtie-3","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Schema","truth_index":{"grade":"C","score":56,"open_postings":22,"ghost_share":0.727,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Hong Kong"],"countries":["HK"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Cloudflare","optional":false},{"name":"DLP","optional":false},{"name":"Google Workspace","optional":false},{"name":"IAM","optional":false},{"name":"NIST CSF","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"TypeScript","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-09-08T10:03:57Z","employer_posted_date":"2026-09-23","last_verified_at":"2026-10-29T09:52:48Z","board_verified":true,"closed_at":null,"days_open":51,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":50},"description":"Role Summary\nAt Bowtie, we aren't just selling insurance; we're rebuilding it from the ground up. As Hong Kong's first virtual insurer, regulated by the HKIA, security isn't a checkbox for us - it's core infrastructure. The successful candidate will own it end to end: application, cloud, and infrastructure security, monitoring, access, and the regulator and partner relationships that come with the territory.\nIf you'd rather build and operate a security function yourself than write a strategy deck about one, we should talk.\nAbout the Role\nYou'll be the accountable, hands-on owner of Bowtie's technical security posture - setting the standard that our SRE and IT teams execute against, and the point of contact when auditors, regulators, or distribution partners come asking.\nYour Key Responsibilities Include:\nSecurity Monitoring & Detection\nOwn the selection and rollout of centralised security monitoring (SIEM) across our critical log sources\n\nBe the accountable owner for triaging and acting on alerts\n\nPrivileged Access & Identity\nDesign and provide implementation details to SRE/IT on privileged access management (PAM) for production and super-admin consoles - brokered, time-bound, and logged\n\nOwn our identity architecture: IdP, SSO, SCIM\n\nApplication & Cloud Security\nOwn security integration into our SDLC - code review guardrails, dependency and supply-chain risk\n\nOwn cloud security posture review across our AWS environment (IAM, SCP, GuardDuty, CloudTrail, KMS) and our Identity/SaaS/Endpoint Protections\n\nRisk Register & Testing\nDefine severity definitions and remediation SLOs, track them in a single register, and report on posture regularly\n\nRun a programme of internal security exercises and an external penetration-test rotation\n\nGovernance, Response & Partnerships\nLead a joint forum with our SRE and IT teams, and put incident runbooks in place\n\nBe the main point of contact for audits, regulatory reviews, independent security assessments and partner security assessments\n\nAbout you\nExperience & Skills\nApplication security - SDLC integration, code review, dependency/supply-chain risk; able to run a supply-chain compromise investigation unaided\n\nCloud security - hands-on with AWS IAM, SCP, GuardDuty, CloudTrail, KMS\n\nHas deployed a SIEM end to end at least once\n\nHas implemented PAM and designed privileged access workflows\n\nIdentity - IdP, SSO, SCIM\n\nStrong written and documentary communication\n\nExposure to Hong Kong financial services regulatory context (HKIA guidelines, cyber risk frameworks, data privacy)\n\nA strong plus: framework literacy (NIST CSF 2.0, ISO/IEC 27001 or similar) with experience running gap assessments and implementation\n\nA strong plus: CNAPP (e.g. Orca), EDR, and vulnerability management tooling\n\nA strong plus: Cloudflare Zero Trust / Gateway / DLP\n\nA strong plus: Google Workspace admin and MDM/BYOD at scale\n\nComfortable in Python or TypeScript - enough to automate, not just ticket-push\n\nCertifications (CISSP, CISM, AWS Security Specialty, OSCP) are welcome, but hands-on evidence outranks them\n\nThe Person\nGenuinely hands-on - builds and operates, no ego about unglamorous work\n\nWrites clean, formal English - policy documents and regulator correspondence are a real part of this job\n\nThinks in risk and cost, not just best practice - comfortable saying a control isn't worth the money, and defending that call\n\nRegisters gaps honestly instead of dressing them up\n\nWorks across teams without needing a reporting line to get things done\n\nComfortable pushing back on engineering leads when the risk calls for it\n\nProposes fixes that can actually be implemented, and follows through to verify they're closed - a finding with no remediation path isn't enough here\n\nSets guardrails rather than approval gates, and is comfortable operating without close supervision\n\nLanguage\nStrong written and spoken English required. Cantonese preferred, but not required.\nWe Offer\nApart from a great career path and an opportunity to do good and do well, we also offer:\nCompetitive package\n\nFlexible work arrangement\n\nBenefits include medical/ dental coverage and wellness programs\n\nEmployee discounts\n\nFun, co-operative, and flexible startup culture\n\nWeekly sharing sessions and regular social gatherings\n\nExcellent learning opportunities with Professional Development Sponsorship\n\nAbout Bowtie\nWe are the first licensed virtual insurer (虛擬保險公司) in Hong Kong.\nWe believe that insurance is fundamentally good, and we are here to bring the good back through our passionate, innovative, and customer-centric team. \nBy combining our deep domain expertise and our own proprietary modern technology, we are building one of the most iconic, category-defining health insurance companies in Asia.\nWe take pride in moving fast all the time and our track record in moving ahead in the game. Our digital insurance platform is also ranked #2 in the world in Sia Partners' 2023 report.\nAs we grow, we're always looking for highly dynamic, hands-on, and passionate talent to join our team. If you are looking for a rewarding career where you will grow together with strong talents from different backgrounds and build products and services that bring a positive impact on the lives of millions of people in Hong Kong / Asia, apply to our opening today!\nInformation collected will be treated in strict confidence and used solely for recruitment purposes.\nThe company will retain all applications no longer than 24 months of which will be destroyed thereafter.\nWe are an equal-opportunity employer. We do not discriminate on the basis of race, sex, disability, or family status in the employment process.","description_format":"text","description_chars":5638,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Flexible schedule","Health insurance","Professional development","Wellness"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Health Insurance & Benefits","Life Insurance & Annuities","InsurTech"],"lifecycle":[{"event":"open","at":"2026-09-08T16:37:36Z"}],"visa":[],"liveness":{"score":14,"band":"cold","label":"Long shot","p_open":1,"p_active":0.253,"p_room":0.55,"age_days":50,"expected_fill_days":40,"reasons":["conf:8","stale_co","win:tail"],"computed_at":"2026-10-29T05:49:05Z"},"pay":null,"html_url":"https://alion.io/job/bowtie-security-engineer-manager","json_url":"https://alion.io/job/bowtie-security-engineer-manager.json","meta":{"generated_at":"2026-10-29T16:13:23Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":24212,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":180185},"rest":"https://alion.io/mcp/rest/get_company?id=180185"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbowtie-security-engineer-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbowtie-security-engineer-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbowtie-security-engineer-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/bowtie-security-engineer-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbowtie-security-engineer-manager"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":552044}},{"tool":"search_jobs","arguments":{"company":"bowtie.com.hk","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":552044},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}