Cyber Security and Risk Analyst / Cyber Security Engineer

• Degree in Computer Science, IT, Cyber Security or related disciplines
• Minimum 3 years' solid experience in cyber security operations or SOC
• Hands-on with SIEM (Splunk, Wazuh, Palo Alto XSIAM), EDR / XDR (Cortex XDR preferred) and vulnerability scanners
• Scripting ability in Python, PowerShell, and / or Bash for automation and analysis
• Knowledge of Windows / Linux administration, networking, firewalls (Palo Alto / Fortinet) and enterprise infrastructure
• Familiar with MITRE ATT&CK, ISO 27001, OWASP Top 10 and CIS Controls

• Experience with cloud security (AWS / Azure), CSPM tools or PAM solutions is a strong advantage
• Possess relevant security qualifications such as CEH, CHFI, ITIL, CCSA, CISSP and CISA is an advantage
• Experience with AI-assisted security operations (LLM, SOAR automation, AI-agent workflows) and understanding of AI security governance is a plus

• Good command of both written and spoken English and Chinese including Putonghua
• Self-motivated team player with strong analytical and problem-solving skills
• Candidates with less experience will be considered for the post of Cyber Security Engineer

We offer attractive remuneration packages and fringe benefits to the right candidates.

Responsibilities:

• Co-ordinate with outsourced Security Operations Centre (SOC) to triage, investigate and respond to security alerts & incidents
• Manage vulnerability scanning, classify findings, enforce remediation SLAs and communicate threat updates
• Administer Cloud Security Posture Management across multi-cloud accounts; monitor compliance and drive remediation
• Operate Privileged Access Management, including user lifecycle, session recording and access reviews
• Support incident response, including containment, evidence preservation, root-cause analysis and post-incident reporting
• Propose and implement security enhancements, including device hardening, firewall controls, SIEM detection rules and automation scripts
• Conduct regular cyber-attack simulations and internal security assessments
• Facilitate audit exercises; maintain policies and compliance documentation (ISO 27001, NIST CSF)
• Review and maintain cyber security policies, standards & procedures in compliance with information security and risk management guidelines
• Leverage AI tools & automation to improve security investigation, detection engineering and operational efficiency