Hong Kong Exchanges and Clearing Limited (HKEX) operates the city's sole securities and derivatives exchange and clearing house, processing trades across equities, commodities, fixed income, and currencies. It also runs the London Metal Exchange. The combined listed market capitalization sits around $35 trillion, with over 2,600 listed companies. The exchange is a critical node connecting mainland China's capital markets to global investors, and vice versa.
The threat model for a financial market infrastructure of this scale is specific: the system cannot go down, transactions cannot be altered, and settlement integrity is non-negotiable. HKEX runs its own trading and clearing platforms, which means the cybersecurity team operates at the intersection of real-time systems engineering and financial regulation. Domains include securing high-throughput, low-latency trading engines, protecting clearing house settlement systems, and hardening the digital pipeline that funnels global capital through Hong Kong.
Security work here is about defending core infrastructure against sophisticated, state-level threat actors and criminal organizations targeting global capital markets. The focus is on platform resilience, access control for mission-critical financial systems, and the integrity of data flows between Hong Kong and London. With dual headquarters and operations spanning two continents, the attack surface includes both the technology stack and the complex regulatory and connectivity requirements of cross-border capital flows.
