SOC/SIEM Engineer Consultant – Cyber Security

About the role

We are seeking a Consultant or Senior Consultant to join our Cyber Defence and Resilience team in Hong Kong. The role focuses on designing, developing and maintaining SIEM detection content and automating SOC workflows to protect client environments against advanced threats.

Key responsibilities

• Manage the full lifecycle of SIEM content, from use‑case definition to rule deployment and tuning.
• Design, develop and optimise detection rules and use cases on major SIEM platforms, aligned with frameworks such as MITRE ATT&CK.
• Research global cyber‑threat intelligence and translate TTPs into actionable SIEM logic.
• Architect and build SOAR automation playbooks to streamline incident handling and reduce MTTR.
• Correlate heterogeneous log sources to identify compromises, anomalous behaviour and APT activity.
• Collaborate with clients and internal stakeholders on security posture, custom use‑case requirements and incident reporting.
• Support Tier‑1/Tier‑2 incident response investigations, including forensic and malware analysis, and provide on‑call escalation support as needed.

Required profile

• Bachelor’s degree in Information Security, Computer Science, Computer Engineering, Risk Management, MIS or a related field; cyber‑security focus preferred.
• 2–3 years of experience in SOC operations, threat hunting, incident response and SIEM content management.
• Experience with penetration testing or red‑team activities is a plus.

Required skills

• Proficiency with SIEM platforms and SIEM query languages.
• Knowledge of the MITRE ATT&CK framework.
• Design and development of SOAR automation playbooks.
• Threat hunting and incident response techniques.
• Forensic analysis and malware analysis capabilities.