Cyber Security Specialist / Senior Specialist
Description
We are seeking an experienced and technically proficient cybersecurity expert to join our team. The ideal candidate will serve as a subject matter expert in cloud security management, AI-enabled threat detection, and cybersecurity automation, delivering cutting-edge security services to stakeholders while driving internal innovation and resilience.
About the job:
Cloud Security Management & Infrastructure Operations (Core Focus): Multi-Cloud Architecture & Defense: Design, configure, and maintain robust security across multi-cloud environments (AWS, Azure, GCP) to ensure secure, scalable, and resilient infrastructure. Workload & Container Protection: Oversee cloud workload security, container hardening (Docker/Kubernetes), Identity & Access Management (IAM), and Web Application Firewalls (WAF). Cloud Posture & Compliance: Conduct continuous Cloud Security Posture Management (CSPM) to enforce adherence to international frameworks (NIST, ISO 27001) and regulatory standards (PDPO, PCI-DSS).
Cyber Security Operations & Risk Management: Incident Response & Threat Monitoring: Oversee security incident handling, log analysis, alert triaging, early warning services, and proactive threat hunting across cloud and enterprise environments. Vulnerability Management: Coordinate regular vulnerability assessments, penetration testing, and secure code reviews across cloud applications and payment gateways. Internal Cyber Resilience: Conduct risk assessments, manage network security assets (EDR / XDR / Firewalls), and support disaster recovery and data protection controls.
AI Research, Automation & DevSecOps: AI-Enabled Security & Threat Research: Analyze emerging cyber risks, AI attack vectors, and threat actor trends while evaluating AI-assisted security tools and analytics. Automation & DevSecOps Workflows: Develop and implement AI/ML-based tools and automation workflows within CI/CD pipelines to streamline threat detection and incident response operations. Stakeholder Collaboration: Partner with software engineering, DevOps, and external stakeholders to promote threat information sharing and digital trust initiatives.
About the people:
Education: Bachelor’s degree or above in Cybersecurity, Computer Science, AI, Information Technology, or a related discipline.
Experience: Minimum 3+ years of hands-on experience in cybersecurity operations, cloud infrastructure security, incident response, or AI security. (Candidates with less experience who demonstrate a strong passion/ability in AI and cloud security will be considered for Cybersecurity Analyst).
Cloud Security Expertise: Practical experience in cloud security management, cloud network architecture, API security, and securing cloud-hosted platforms.
AI & Security Automation: Hands-on experience with AI/Generative AI tools, threat/anomaly detection, or scripting for security automation.
Frameworks & Concepts: In-depth knowledge of cyber threat models, vulnerability management, and security frameworks (NIST, ISO 27001).
Highly Valued Certifications (Strong Advantage): Cloud & Technical Operations: CCSP (Certified Cloud Security Professional), OSCP, CEH, or CompTIA CySA+. Governance & Core Security: CISSP, CISA, CISM, or AI/ML-related certifications.
Creative, future-focused, mature, and self-motivated with strong analytical and problem-solving skills under pressure.
Good command of written and spoken English and Chinese.
You will enjoy:
5-day work week
Competitive remuneration
Double pay
Group Medical Insurance
Various types of pay leave (e.g. Pay Sick Leave, Birthday Leave, Marriage Leave, Special Leave, etc.)
Energetic and open-minded team
Fun and harmonious working environment
Broad job exposure
Relaxed dress code
Flexible working hour
Remuneration will be commensurate with qualification and experience. Interested parties, please send your application with detailed resume indicating both existing & expected salary and date of availability to us by clicking "Apply Now".
We are an equal opportunity employer. All information provided by applicants will be treated in strict confidence and used for recruitment purpose only. All applications received will be kept in strictest confidence and for recruitment purpose only.
Skills
- AI
- Analytics
- Anomaly Detection
- API
- Api Security
- Automation
- AWS
- Azure
- CI/CD
- Cism
- Cissp
- Cloud
- Cloud Security
- CSPM
- Cybersecurity
- DevOps
- DevSecOps
- Docker
- EDR
- Firewall
- GCP
- Generative AI
- IAM
- ISO 27001
- Kubernetes
- Machine Learning
- Network Security
- Nist
- Pci Dss
- Penetration Testing
- Risk Assessment
- Threat Hunting
- Vulnerability Management
- WAF
- XDR