Job Description - Cybersecurity Manager/ Blue Team Lead | Large Scale Bank
What You'll Do
Drive threat detection, threat hunting, incident response and cyber defence initiatives across on-premise and cloud environments.
Tune and optimize SIEM, EDR, SOAR and security monitoring platforms to improve detection coverage and response effectiveness.
Investigate security incidents, conduct root cause analysis, and coordinate containment, eradication and recovery activities.
Develop and implement detection use cases, correlation rules, threat intelligence and cyber-hunting methodologies.
Partner with Red Team, Threat Intelligence, Infrastructure and Application Security teams to improve the Bank's overall security posture.
Conduct security assessments and identify gaps in monitoring, logging and detection controls.
Support cyber exercises, attack simulations and incident response preparedness activities.
Research emerging threats, TTPs and attack vectors, and translate findings into actionable detection and defence measures.
Provide technical leadership and mentorship to junior security analysts and engineers.
Requirements
Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related disciplines.
Strong communication skills in English and Chinese.
Minimum 5 years of hands-on experience in Security Operations, Incident Response, Threat Hunting, Detection Engineering, Blue Team Operations, or Cyber Defence.
Strong technical background in enterprise security environments, preferably within Banking, Financial Services, Large Enterprises, MSSPs or Cyber Security Consultancies.
Hands-on experience with SIEM platforms (Splunk, QRadar, Sentinel, ELK), EDR solutions, SOAR platforms and Threat Intelligence tools.
Strong knowledge of Windows, Linux, Active Directory, Networking, Cloud Security (Azure/AWS/GCP), MITRE ATT&CK Framework and Cyber Kill Chain.
Experience in incident investigation, malware analysis, threat hunting and detection rule development.
Familiarity with scripting or automation using Python, PowerShell or SQL is highly preferred.
If you're interested in this role, click 'apply now' to submit your CV.
All Job Ads are subject to GrabJobs’s Terms of Service. We allow users to flag postings that may be in violation of those terms. Job Ads may also be flagged by GrabJobs moderation team. However, no moderation system is perfect, and flagging a posting does not ensure that it will be removed.
Be the first to receive the latest Others Full-Time Jobs in Hong Kong.
Setup your job alert:
By activating job alerts, I agree to GrabJobs Terms & Privacy Policy. I can unsubscribe to job alerts anytime.
Skip
GrabJobs is the no1 job portal in Hong Kong, connecting you to thousands of jobs fast!
Find the best jobs in Hong Kong, apply in 1 click and get a job today!