CYBER SECURITY AND RISK ANALYST／CYBER SECURITY ENGINEER

Ref. No.: JDB/HLD20/CSRA

Responsibilities:

• Co-ordinate with outsourced Security Operations Centre (SOC) to triage, investigate and respond to security alerts & incidents

• Manage vulnerability scanning, classify findings, enforce remediation SLAs and communicate threat updates

• Administer Cloud Security Posture Management across multi-cloud accounts; monitor compliance and drive remediation

• Operate Privileged Access Management, including user lifecycle, session recording and access reviews

• Support incident response, including containment, evidence preservation, root-cause analysis and post-incident reporting

• Propose and implement security enhancements, including device hardening, firewall controls, SIEM detection rules and automation scripts

• Conduct regular cyber-attack simulations and internal security assessments

• Facilitate audit exercises; maintain policies and compliance documentation (ISO 27001, NIST CSF)

• Review and maintain cyber security policies, standards & procedures in compliance with information security and risk management guidelines

• Leverage AI tools & automation to improve security investigation, detection engineering and operational efficiency

Requirements:

• Degree in Computer Science, IT, Cyber Security or related disciplines

• Minimum 3 years’ solid experience in cyber security operations or SOC

• Hands-on with SIEM (Splunk, Wazuh, Palo Alto XSIAM), EDR / XDR (Cortex XDR preferred) and vulnerability scanners

• Scripting ability in Python, PowerShell, and / or Bash for automation and analysis

• Knowledge of Windows / Linux administration, networking, firewalls (Palo Alto / Fortinet) and enterprise infrastructure

• Experience with cloud security (AWS / Azure), CSPM tools or PAM solutions is a strong advantage

• Familiar with MITRE ATT&CK, ISO 27001, OWASP Top 10 and CIS Controls

• Possess relevant security qualifications such as CEH, CHFI, ITIL, CCSA, CISSP and CISA is an advantage

• Experience with AI-assisted security operations (LLM, SOAR automation, AI-agent workflows) and understanding of AI security governance is a plus

• Good command of both written and spoken English and Chinese including Putonghua

• Self-motivated team player with strong analytical and problem-solving skills

• Candidates with less experience will be considered for the post of Cyber Security Engineer

Attractive salary and fringe benefits will be offered to the successful candidates. Please apply with full resume by mail to Human Resources Department, Henderson Land Development Co. Ltd., 71/F, Two International Finance Centre, 8 Finance Street, Central, Hong Kong or by fax at 2905 1855 or visit our homepage at http://www.hld.com or by clicking "Apply now".

(Please quote the ref. no. on letter)

Personal data provided by job applicants will be used for recruitment purpose only.