Active Directory & Security Analyst / Infrastructure Specialist (over $55K)

CL Technical Services Ltd.; Sha Tin; On-site; HKD 50,000 - 61,000; Full time

Job summary

CL Technical Services Ltd. is seeking an Active Directory & Security Analyst / Infrastructure Specialist to administer AD DS, manage vulnerability assessments, and coordinate security initiatives across IT infrastructure.

The role requires 5+ years of relevant experience, a solid AD DS background, and strong collaboration skills to work with cross-functional teams and external vendors. Candidates should have a security-focused mindset and the ability to prepare management reports.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Information Security, or a related discipline.
• Minimum 5 years of experience in system analysis, IT infrastructure support, system administration, or security operations.
• Hands-on experience in Active Directory Domain Services (AD DS) administration, maintenance, and troubleshooting.
• Experience with vulnerability management and remediation coordination, including scanning and testing tools.

Responsibilities

• Administer, maintain, and support Active Directory Domain Services (AD DS).
• Manage end-to-end vulnerability assessment activities and remediation coordination.
• Analyze vulnerability reports and distinguish genuine risks from false positives.
• Coordinate infrastructure security initiatives with system owners, support teams, and vendors.
• Plan Windows platform migration projects with minimal service disruption.
• Schedule and track security audits for servers, networks, and applications.

Skills

AD DS administration

Vulnerability management

Security auditing

Windows Server

Migration projects

Project management

Stakeholder coordination

Technical communication

Education

Bachelor's degree in Computer Science / IT / Information Security

Tools

Vulnerability scanning tools

SAST/DAST tools

Job description

Active Directory & Security Analyst / Infrastructure Specialist (over $55K)

Administer, maintain, and support Active Directory Domain Services (AD DS), ensuring system reliability, availability, and security.

Manage end-to-end vulnerability assessment activities, including scheduling scans, operating security scanning tools, reviewing findings, and coordinating remediation efforts.

Analyze vulnerability scan reports and identify genuine security risks while filtering out false positives.

Coordinate and lead infrastructure security initiatives involving system owners, support teams, and external vendors.

Conduct regular system security assessments, compliance reviews, and audits in accordance with established security policies and standards.

Plan and coordinate Windows platform migration projects, ensuring smooth implementation with minimal service disruption.

Schedule and track security audits for servers, networks, and applications, ensuring timely completion by relevant stakeholders.

Gather audit evidence and system information, and assist in preparing audit documentation and assignment briefs.

Collaborate with cross-functional teams to drive continuous improvements in cybersecurity posture and operational efficiency.

Prepare management reports, technical documentation, audit summaries, and project progress updates.

Job Requirements:

Bachelor's degree in Computer Science, Information Technology, Information Security, or a related discipline.

Minimum 5 years of experience in system analysis, IT infrastructure support, system administration, or security operations.

Solid hands-on experience in Active Directory Domain Services (AD DS) administration, maintenance, and troubleshooting.

Proven experience in vulnerability management, including the use of vulnerability scanning and application security testing tools (SAST/DAST), as well as remediation coordination.

Strong understanding of infrastructure, operating system, network, and web application security vulnerabilities.

Ability to review and interpret security scan results, assess risk severity, and distinguish genuine threats from false positives.

Familiarity with security governance, compliance requirements, and audit processes.

Knowledge of government IT security standards, policies, and guidelines is an advantage.

Experience with Windows Server environments and migration projects is preferred.

Strong project management and stakeholder coordination skills with the ability to manage multiple initiatives simultaneously.

Excellent communication and interpersonal skills, with the ability to work effectively with technical and non-technical stakeholders.

Strong analytical, organizational, and problem-solving abilities.

Experience preparing professional reports, audit documentation, and management presentations.