Cyber Security Analyst (SOC)
Summary of this Role
We're looking for a skilled and proactive Cyber Security Analyst to join our dynamic team in Hong Kong. In this critical role, you'll be at the forefront of protecting our systems and our customers from evolving cyber threats. You'll not only respond to incidents but also play a key role in enhancing our detection capabilities, mentoring junior analysts, and contributing to our overall security posture. If you're passionate about cybersecurity and thrive in a fast-paced environment, we want to hear from you!
Key Responsibilities
Serve as a primary escalation point for junior Cyber Security Analysts, providing guidance and support.
Develop and optimize SIEM detection rules and other security infrastructure to counter emerging threats.
Monitor and respond to security incidents, including managing firewalls, endpoint security, and SIEM event correlation.
Perform vulnerability scans and lead remediation efforts for identified risks. Serve as a technical point of contact for customer security inquiries (phone, chat, ticketing).
Investigate and document cyber security incidents and breaches.
Implement and manage security solutions like firewalls and data encryption.
Prepare comprehensive security reports for customer insights.
Develop and promote IT security best practices in accordance with Mitre Att&ck framework and ISO 27001:2022.
Participate in security projects and critical initiatives.
Stay current with industry trends and security standards
Job Requirement
Solid experience working in a Security Operations Center (SOC).
Strong technical troubleshooting and problem-solving skills.
Minimum 5 years of experience as a Security Analyst; Candidates with less experience are also welcomed
Bachelor’s degree in computer science or a related field, or equivalent practical experience.
Relevant security certifications (e.g., Security+, CEH, CISSP) are highly preferred.
Hands-on experience with Windows and Linux operating system administration.
Proficiency with security tools and platforms including Palo Alto/Fortinet firewalls, Microsoft Azure, and Splunk SIEM (or similar technologies).
Comprehensive understanding of cybersecurity concepts such as firewalls, proxies, SIEM, antivirus, penetration testing, vulnerability management, and IDS/IPS.
Experience with patch management, including timely deployment and understanding business impact.
Ability to translate complex technical information to non-technical audiences/stakeholders.
Good command of written and verbal communication and interpersonal skills.