Senior InfoSecurity Engineer / AM (Perm, Inhouse)

Responsibility:

• Monitor, triage, and analyze security logs and alerts across SIEM, EDR, and network gateways. Lead end-to-end incident handling, investigating phishing emails, malicious domains, and endpoint anomalies to rapidly contain threats.
• Oversee server vulnerability scans, prioritize remediation, and collaborate with IT teams to enforce timely patching lifecycles and harden Windows/Linux environments against common exploits.
• Deliver actionable configuration guidance across network perimeters, cloud workloads, operating systems, and Identity and Privileged Access Management (IAM/PAM) systems.
• Administer and optimize the enterprise Zero Trust Network Access (ZTNA) platform. Onboard applications, tune adaptive access policies, monitor performance, and troubleshoot connectivity to ensure secure, resilient access.
• Track emerging attack vectors across cloud, on-premises, and mobile ecosystems. Implement technical controls that maintain operational alignment with internal security policies and regulatory frameworks like ISO 27001 and HKMA C-RAF.

Job Requirements:

• Bachelor's in Computer Science, Cyber Security, or related discipline
• With 5 years of IT experience, including 2+ years in a SOC or cyber security role.
• Hands-on experience in security monitoring, event investigation, alert triage, and incident handling.
• Practical experience supporting security solutions (firewalls, IDS/IPS, proxies, email/endpoint security, vulnerability scanners, SIEM, IAM/PAM, and encryption).
• Strong grasp of TCP/IP networking, Windows, and Linux/UNIX system administration.
• Experience with cloud, AD, network, or application security; familiarity with ISO 27001 or HKMA C-RAF
• Strong analytical problem-solving abilities, clear communication skills, and the capacity to collaborate effectively under pressure.
• Proficient in Cantonese, English and Mandarin

Our specialist consultant Wendy will get in touch with you soon, if we find your profile suitable for this position or any other vacancies we are recruiting for.