2027 Fresh Grad Hire - Security Operations Engineer

Futu Holdings Limited; Hong Kong; On-site; HKD 100,000 - 134,000; Part time

Job summary

Futu Holdings Limited is seeking a motivated intern to join its security operations and protection system team in Hong Kong. Under mentor guidance, you will participate in day-to-day operations across vulnerability analysis, threat intelligence, and incident detection and response.

You will assist in monitoring, analysis, and initial handling of security incidents, support remediation follow-up, and help optimize protection strategies while gaining hands-on experience with cloud security

Qualifications

• Strong interest in cybersecurity; understanding of common network attack and defense principles; familiarity with the OWASP Top 10 and common vulnerability principles.
• Familiarity with mainstream security products and their underlying principles; Experience in any of the following is preferred.
• Exposure to security devices or platforms such as WAF, firewalls, intrusion detection, vulnerability scanning, or host protection.
• Understanding of basic security services of major cloud platforms (AWS, Alibaba Cloud, Tencent Cloud).
• Participation in CTFs, campus security clubs, or personal security projects is preferred.
• English & Chinese as working languages: able to read regulations and communicate in English.

Responsibilities

• Participate in the development of the company's security operations and protection system; under the guidance of a mentor, take part in day-to-day operations across areas such as vulnerability analysis, threat intelligence, and security incident detection and response
• Assist in the monitoring, analysis, and initial handling of security incidents; support issue localization, remediation follow-up, and post-mortem report writing; continuously learn and optimize protection strategies
• Assist in maintaining the day-to-day security operations processes for cloud infrastructure, including WAF configuration, DDoS protection, host monitoring, vulnerability scanning, image and container security management, and security baseline checks; learn to identify and assess security risks of cloud assets

Skills

Cybersecurity fundamentals

Threat analysis

Incident detection

Log analysis

Tools

Nmap

Burp Suite

Wireshark

Job description

• Participate in the development of the company's security operations and protection system; under the guidance of a mentor, take part in day-to-day operations across areas such as vulnerability analysis, threat intelligence, and security incident detection and response
• Assist in the monitoring, analysis, and initial handling of security incidents; support issue localization, remediation follow-up, and post-mortem report writing; continuously learn and optimize protection strategies
• Assist in maintaining the day-to-day security operations processes for cloud infrastructure, including WAF configuration, DDoS protection, host monitoring, vulnerability scanning, image and container security management, and security baseline checks; learn to identify and assess security risks of cloud assets

• Participate in the development of the company's security operations and protection system; under the guidance of a mentor, take part in day-to-day operations across areas such as vulnerability analysis, threat intelligence, and security incident detection and response
• Assist in the monitoring, analysis, and initial handling of security incidents; support issue localization, remediation follow-up, and post-mortem report writing; continuously learn and optimize protection strategies
• Assist in maintaining the day-to-day security operations processes for cloud infrastructure, including WAF configuration, DDoS protection, host monitoring, vulnerability scanning, image and container security management, and security baseline checks; learn to identify and assess security risks of cloud assets

Requirements

• Strong interest in cybersecurity; understanding of common network attack and defense principles; familiarity with the OWASP Top 10 and common vulnerability principles (e.g., SQL injection, XSS, CSRF) is preferred
• Familiarity with mainstream security products and their underlying principles; Experience in any of the following is preferred (mastery not required):
• Exposure to security devices or platforms such as WAF, firewalls, intrusion detection, vulnerability scanning, or host protection;
• Understanding of the basic security services of mainstream cloud platforms such as AWS, Alibaba Cloud, or Tencent Cloud;
• Participation in CTF competitions or campus security clubs, or ownership of a personal security blog or GitHub security projects, is preferred
• Understanding of the basic methods for security incident tracing and log analysis; familiarity with common attack chain models (e.g., MITRE ATT&CK); ability to use basic tools (e.g., grep, ELK, SQL queries) for log querying and correlation analysis is preferred
• English & Chinese as working languages: fluent reading and writing; able to read English regulations and standards documents, and to conduct day-to-day email and meeting communication in English

Preferred Qualifications

• Internship experience in security operations, penetration testing, or vulnerability analysis
• Self-taught proficiency in security tools (e.g., Nmap, Burp Suite, Wireshark) with the ability to perform basic operations

*Open to candidates graduating between January 2026 and August 2027.