Cybersecurity Support Engineer (Location: Cyberport)
The Role:
A Cybersecurity Support Engineer acts as the bridge between day-to-day security operations, technical infrastructure maintenance, and tier-2/3 escalation support. This position also focuses on maintaining and administrating security tooling, troubleshooting security alerts, hardening systems, and ensuring compliance.
Key Responsibilities:
Manage security solutions (SIEM, EDR/XDR, etc.) customized to client requirements
Coordinate regular vulnerability scans across endpoints, network devices and servers and subsequent follow ups
Track CVE releases and vendor security advisories to prioritize patch deployment activities
Assist infrastructure teams in applying secure baseline configurations (CIS benchmarks, disabling unnecessary protocols/ports like unneeded CAPWAP or legacy services)
Support penetration testing and compliance audits
Assist in satisfying industry compliance frameworks (e.g. ISO27001)
Maintain standard operating procedures (SOPs) for incident response playbooks and system hardening guides
Perform security incident investigation, response coordination, and remediation
Develop automation scripts and infrastructure-as-code to enhance security posture and operational efficiency
Requirements:
Bachelor’s degree or High Diphoma in Computer Science, Information Technology, Cybersecurity, or related fields
Minimum 3 years of hands-on experience in cybersecurity, infrastructure security, or security engineering
Strong knowledge of Linux and Windows system administration, networking (TCP/IP, firewalls, VPN), and core security concepts
Strong knowledge in endpoint security concepts (EDR storyline analysis, local privilege escalation techniques)
Hands-on operation of SIEM platforms and SecOps workflows (detection engineering, incident triage, threat hunting)
Excellent communication skills – able to explain complex technical topics to technical and non-technical audiences
Fluent in spoken and written English and Cantonese (Mandarin is an advantage)
Relevant professional certifications preferred (e.g., CISSP, CISM, CCSP, CEH, etc.)
Preferred Experience:
Scripting/programming skills (Python, PowerShell, Bash) for security automation
Proficiency with infrastructure-as-code and automation tools (Terraform, Ansible, Puppet, etc.)
How to Apply:
Attractive remuneration package and fringe benefit will be offered to the right candidate. Interested parties please send your resume with cover letter, stating current and expected salary to the Human Resources & Administration Department by clicking Apply Now.
For more information about us, please visit the corporate website at https://www.oneas1a.com/
Equal employment opportunities apply to all applicants. All applications and data collected will be treated in strict confidence and used exclusively for recruitment purposes. Only short-listed candidates will be invited for interview. The company will retain the applications for a maximum period of 12 months and may refer suitable candidates to other vacancies within the Group.