網絡安全工程師 Cybersecurity Engineer

Key Responsibilities

* Responsible for the planning, deployment, administration, and maintenance of enterprise network and information security systems.

* Monitor security events and system logs, analyze abnormal activities, and identify potential threats.

* Conduct vulnerability scanning, security assessments, and risk analyses, and follow up on remediation activities.

* Manage and maintain firewalls, intrusion detection/prevention systems (IDS/IPS), antivirus solutions, and other security devices.

* Develop, implement, and enforce information security policies, procedures, and technical standards.

* Assist in handling cybersecurity incidents, including investigation, analysis, containment, eradication, and recovery.

* Provide security configuration and technical support for servers, network devices, cloud platforms, and endpoint devices.

* Perform regular security testing and system reviews to identify and mitigate potential risks.

* Support internal audits and external compliance requirements to ensure adherence to information security standards and regulatory requirements.

* Prepare technical documentation, incident reports, and risk assessment reports.

* Stay up to date with the latest cybersecurity trends, vulnerabilities, and attack techniques, and recommend security improvements.

Job Requirements

* Diploma or above in Information Technology, Computer Science, Network Engineering, Information Security, or a related discipline.

* Relevant experience in cybersecurity, system administration, or related fields.

* Solid understanding of TCP/IP, DNS, VPN, Firewalls, and other networking technologies.

* Familiarity with Windows and/or Linux system administration.

* Knowledge of vulnerability management, security monitoring, and incident response.

* Experience with cloud security technologies (e.g., AWS, Azure, or GCP) is an advantage.

* Familiarity with SIEM platforms, security monitoring tools, and penetration testing tools is preferred.

* Professional certifications are highly desirable, including:

* CISSP

* CISM

* CISP

* CISA

• AI & GenAI Security OWASP LLM/Agentic AI/ML Top 10, MITRE ATLAS

  * Cyber Risk Assessment AI Threat Modeling & Security Strategy

  * Regulatory Compliance HKMA C-RAF 2.0, SFC, MAS

  * Cloud Security AWS, GCP, Azure Architecture

  * Frameworks ISO 27001, NIST CSF, PCI DSS, COBIT

  * Incident Response MITRE ATT&CK & MITRE ATLAS Frameworks

• OWASP, Frameworks ISO 27001, NIST CSF, PCI DSS, COBIT, MITRE ATT&CK & MITRE ATLAS Frameworks

* Strong analytical thinking, problem-solving skills, and teamwork spirit.

* Ability to work independently with excellent written and verbal communication skills in both English and Chinese.

We Offer

* Discretionary Performance Bonus

* Medical Benefits

* Excellent Career Advancement Opportunities

* Opportunities to participate in large-scale cybersecurity projects and work with the latest security technologies and solutions.