IT Security Engineer
Summary
IT Security Engineer at Midland Holdings, a Hong Kong property agency. Day to day you own security controls across in-house IT and outsourced services, run vulnerability assessments and pen tests, lead incident response, champion secure SDLC, report security metrics to management, and govern the safe adoption of AI/LLMs across the organisation.
Looking to join a dynamic, prestigious and reputable property agency in Hong Kong?
We are searching for driven and talented individuals like you to be part of our energy-packed team. We offer competitive salaries, comprehensive benefits, and unparalleled opportunities for career growth and development.
Join us in shaping the future of property in Hong Kong, where we set new standards of excellence in the industry. We are looking for those who are hardworking, driven, and passionate about innovation in real estate to be part of our team. If you're ready to propel your career to the next level, apply now, and become part of our dynamic and growing team!
Responsibilities:
Own and continuously strengthen security controls across in-house IT operations and outsourced services, in line with company policies and industry standards
Champion secure SDLC and secure coding practices for in-house developed applications
Lead regular vulnerability assessments and penetration tests across IT systems and network infrastructure, and drive timely patching of critical vulnerabilities
Define and own the Computer Security Incident Response process — including escalation channels, diagnosis, and coordinating remediation with internal and external stakeholders
Build and maintain dashboards and metrics on cyber threats and vulnerabilities for management reporting
Govern the secure adoption of AI across the organisation, including LLMs and AI agents
Act as the go-to security advisor for teams across the business
Stay ahead of emerging cyber-attack threats and evolving mitigation techniques
Requirements:
Degree in Information Security, Computer Science, IT, or a related field
3–5 years' hands-on experience in information security — incident response, security operations, or computer forensics
Solid knowledge of TCP/IP networking and security products (firewalls, IDPS, web proxies)
Proficiency with Windows and Linux/UNIX environments
Working knowledge of core security technologies: AAA, email/web security, PKI, encryption, endpoint protection
Strong understanding of attack techniques (APT, DDoS, malware, phishing) and corresponding investigation and response methodologies
Nice to Have
Security certifications such as CISSP, OSCP, GIAC, CEH, CISM, or CISA
Experience with security frameworks and standards: ISO 27001, C-RAF, COBIT, CIS Critical Controls
Background in security vendors or law enforcement
Exposure to AI security governance — e.g. OWASP Top 10 for LLMs, Agent 365, Power Platform, or similar AI risk frameworks
Experience in IT/security project management, product evaluation, and vendor management
Interest parties please send your updated CV with current and expected salary by clicking “APPLY NOW” or go to our Company website at http://midland.com.hk. [link removed] We are an Equal Opportunity Employer. All personal data will be collected for recruitment purpose only and treated strictly confidential.
