Cybersecurity Engineer

About Finstock, Inc.

Finstock, Inc. builds AI-powered financial research, trading analytics, quantitative research, and market intelligence tools for analysts, research teams, and institutional users.

About the Role

Finstock is seeking a Cybersecurity Engineer to help secure our cloud infrastructure, applications, APIs, financial data systems, AI workflows, and internal technology environment.

This hybrid role will support our newly opening Singapore office. We welcome candidates currently based across Southeast Asia who are willing to relocate to Singapore.

New Singapore office; the specific address will be disclosed to shortlisted candidates.

Key Responsibilities

• Secure cloud infrastructure, networks, applications, APIs, databases, endpoints, and CI/CD environments.
• Conduct vulnerability assessments, security reviews, penetration testing, and remediation tracking.
• Implement identity and access management, secrets management, encryption, logging, and monitoring controls.
• Monitor security alerts and lead incident investigation, containment, recovery, and post-incident reviews.
• Embed security testing into software development and deployment workflows.
• Assess AI and LLM-related risks, including prompt injection, data leakage, insecure integrations, and unauthorized access.
• Maintain security policies, architecture documentation, incident procedures, and risk registers.
• Support security reviews, vendor assessments, customer due diligence, and readiness for frameworks such as SOC 2 and ISO 27001.
• Provide practical security guidance and awareness training to employees and engineering teams.

Required Qualifications

• 3+ years of experience in cybersecurity, cloud security, application security, security engineering, or a related role.
• Hands-on experience securing AWS, Azure, or Google Cloud environments.
• Knowledge of network security, IAM, vulnerability management, incident response, encryption, and secure software development.
• Experience with security monitoring, SIEM, endpoint protection, vulnerability scanning, and cloud-security tools.
• Ability to automate security tasks using Python, Bash, PowerShell, or similar scripting languages.
• Strong analytical, documentation, and cross-functional communication skills.
• Willingness to relocate to Singapore and work in a hybrid environment.

Preferred Qualifications

• Experience in fintech, financial services, SaaS, AI platforms, or data-intensive products.
• Familiarity with Docker, Kubernetes, Terraform, GitHub Actions, and infrastructure as code.
• Knowledge of OWASP standards, zero-trust principles, threat modeling, and secure API design.
• Experience with SOC 2, ISO 27001, cloud-security frameworks, or privacy and data-protection requirements.
• Certifications such as CISSP, CCSP, OSCP, Security+, AWS Security Specialty, or equivalent are advantageous but not required.

Relocation and Work Eligibility

• The role is open to qualified candidates currently based in Southeast Asia.
• Candidates must be willing to relocate to Singapore and meet applicable Singapore work-authorization requirements.
• Finstock will provide partial relocation assistance for reasonable and approved relocation expenses.
• The relocation package will depend on the candidate’s location, circumstances, role fit, and company approval.
• Relocation assistance is subject to prior written approval and does not guarantee immigration approval, work authorization, visa sponsorship, or reimbursement of all expenses.

What We Offer

• Annual base salary of USD $50,000–$65,000.
• Hybrid work from Finstock’s new Singapore office.
• Partial relocation assistance for eligible candidates.
• Direct exposure to cloud security, financial data infrastructure, AI systems, and quantitative research technology.
• Collaboration with an international engineering, AI, data, product, and research team.

Important Role Boundaries

This is a cybersecurity engineering role supporting Finstock’s technology infrastructure, applications, financial data systems, AI workflows, internal systems, and security operations.

The role does not require or permit the employee to:

• Provide personalized investment, legal, tax, accounting, immigration, or financial advice to users, clients, employees, or candidates.
• Recommend that any person buy, sell, or hold a financial instrument based on personal circumstances.
• Execute trades or manage client funds.
• Handle client assets, deposits, withdrawals, or payments.
• Promise or imply investment returns, trading profits, or risk-free outcomes.
• Use unauthorized data sources, violate third-party data terms, or bypass licensing restrictions.
• Conduct security testing against third-party systems without documented authorization.
• Access user, employee, applicant, or company data outside approved role-based permissions.
• Disable, bypass, or weaken required security controls without documented authorization.
• Request candidates to pay an application fee, recruitment fee, training payment, software payment, equipment payment, relocation deposit, or onboarding fee.

Equal Opportunity Statement

Finstock, Inc. is an equal opportunity employer. Employment decisions are based on role-related qualifications, experience, technical ability, work quality, availability, business requirements, and applicable employment requirements.

Finstock, Inc. does not make hiring decisions based on age, gender, gender identity, religion, ethnicity, race, national origin, disability, sexual orientation, marital status, family status, veteran status, or any other status protected by applicable law.