Cyber Security Analyst & Engineer

About the role

We are looking for a proactive Cyber Security Analyst / Engineer to join our team in Hong Kong. You will work closely with our outsourced Security Operations Centre and internal stakeholders to protect our multi‑cloud environment and enterprise infrastructure.

Key responsibilities

• Coordinate with the outsourced SOC to triage, investigate and respond to security alerts and incidents.
• Manage vulnerability scanning, classify findings, enforce remediation SLAs and communicate threat updates.
• Administer Cloud Security Posture Management across multi‑cloud accounts, monitor compliance and drive remediation.
• Operate Privileged Access Management, including user lifecycle, session recording and access reviews.
• Support incident response activities such as containment, evidence preservation, root‑cause analysis and post‑incident reporting.
• Propose and implement security enhancements, including device hardening, firewall controls, SIEM detection rules and automation scripts.
• Conduct regular cyber‑attack simulations, internal security assessments and facilitate audit exercises (ISO 27001, NIST CSF).

Required profile

• Degree in Computer Science, IT, Cyber Security or a related discipline.
• Minimum 3 years of solid experience in cyber security operations or SOC environments.
• Strong command of written and spoken English and Chinese (Putonghua).
• Self‑motivated team player with strong analytical and problem‑solving abilities.

Required skills

• Hands‑on experience with SIEM platforms (Splunk, Wazuh, Palo Alto XSIAM).
• Experience with EDR/XDR solutions (Cortex XDR preferred).
• Proficiency in vulnerability scanners.
• Scripting in Python, PowerShell and/or Bash.
• Windows and Linux administration, networking fundamentals and firewall management (Palo Alto, Fortinet).
• Cloud security knowledge for AWS and Azure, including CSPM tools.
• Familiarity with MITRE ATT&CK, ISO 27001, OWASP Top 10 and CIS Controls.
• Understanding of AI‑assisted security operations (LLM, SOAR automation, AI‑agent workflows).

What we offer

• Attractive salary and fringe benefits.