Cyber Security Engineer

About the role

We are seeking a Cyber Security Engineer to deliver cybersecurity service projects across the Greater Bay Area, serving clients in Hong Kong and Mainland China. The role involves independent execution of security consulting engagements, from risk assessment to penetration testing and report writing.

Key responsibilities

• Deliver security consulting projects covering risk assessment, compliance control review, vulnerability assessment, configuration review, privacy assessment, penetration testing, and risk analysis.
• Conduct penetration testing, vulnerability scanning, configuration audits, cloud security inspections, web application and infrastructure security assessments.
• Validate remediation plans, track risk status, maintain evidence records, and ensure high‑quality project delivery.
• Support pre‑sales activities such as requirement clarification, effort estimation, technical proposal drafting, and client meetings.

Required profile

• Minimum 3 years of experience in information security, IT audit, penetration testing, privacy compliance, or security consulting.
• Proficiency in security audit and assessment workflows.
• Familiarity with Hong Kong government security and privacy standards (S17, G3, ISPG‑SM01, PDPO, PCPD).
• Working knowledge of AI security, AI governance, and AI‑related risks.
• Fluent in Cantonese and Mandarin with strong client communication and documentation skills.
• Legal eligibility to work in Hong Kong.

Required skills

• Penetration testing
• Vulnerability scanning
• Configuration audit
• Cloud security inspection
• Web application security assessment
• Infrastructure security assessment
• Risk assessment
• Compliance control review
• Privacy assessment
• AI security
• AI governance