Hong Kong Exchanges and Clearing Limited

Software Developer – AI Vulnerability Triage

Hong Kong Exchanges and Clearing Limited
Apply
2 months ago
Shenzhen, ChinaMid Level

Responsibilities

  • Design and build a greenfield AI-powered vulnerability triage platform.
  • Ingest vulnerability feeds from Relia Quest, MDE, SonarQube, Qualys, FireMon, and vendor notifications.
  • Apply AI-driven contextualization and risk-based prioritization to vulnerability data.
  • Surface actionable triage decisions for security operations and patching teams.
  • Design PostgreSQL schemas, optimize queries, define indexing strategies, and manage migrations.
  • Build REST APIs with authentication and role-based access control.
  • Implement asynchronous programming, message queues, and data pipeline patterns.
  • Propose architecture and drive delivery from loosely defined requirements.
  • Produce technical documentation and support containerized CI/CD delivery.

Requirements

  • At least 3 years of professional software development experience in production environments.
  • Experience with Java, Node.js, and/or Python.
  • Strong PostgreSQL skills, including schema design, query optimization, indexing strategy, and migrations.
  • Demonstrable experience integrating with LLM or AI APIs such as OpenAI, Anthropic, or Azure OpenAI.
  • Experience building REST APIs with authentication and RBAC.
  • Understanding of asynchronous programming, message queues, and data pipeline patterns.
  • Experience with containerization and CI/CD pipelines.
  • Strong written communication and technical documentation skills.
  • Preferred experience with cybersecurity tooling, vulnerability management, or security operations platforms.
  • Preferred familiarity with CVSS, EPSS, or vulnerability risk-scoring frameworks.
  • Preferred experience with OpenShift or Kubernetes in an enterprise environment.
  • Preferred background in regulated financial services, FMI, an exchange, or a similar environment.
  • Preferred prompt engineering experience involving structured outputs, chain-of-thought, and RAG patterns.

Benefits

  • Permanent position based in Shenzhen, China.
  • Standard 40-hour workweek and scheduled weekly hours of 40.
Contact me