AI Security Engineer — SIEM, SOC & Endpoint Protection

China CITIC Bank International Limited; Hong Kong; On-site; HKD 900,000 - 1,300,000; Full time

Job summary

China CITIC Bank International Limited seeks a seasoned security professional to lead IT security initiatives for AI-related risk controls in Hong Kong. The role covers advisory for overseas IT teams, security drills, standards maintenance, and governance across endpoints, networks, and applications.

Applicants should have 5+ years in IT with security focus, relevant cybersecurity certifications, and familiarity with HK regulatory requirements to support a complex financial network.

Qualifications

• Degree holder in Information Technology or relevant discipline.
• 5+ years’ IT experience with at least 1 year in IT security.
• AI security/governance certifications are a plus.
• HKMA ECF Core/Professional level qualification in Cybersecurity.
• CISSP, CISA, CISM or similar certificates are advantageous.
• Knowledge of Windows/Unix/Linux and AI OS environments.
• Familiar with Firewall, IDS/IPS, WAF, DDoS, VPN, DLP, SIEM.
• Awareness of AI tools, LLM and MCP concepts.
• Knowledge of HKMA, MAS, PCI-DSS regulatory requirements.
• Experience with vulnerability/penetration testing or PCI-DSS assessment.

Responsibilities

• To support new AI initiatives in security and risk controls.
• Provide security advisory to Oversea Branch IT teams.
• Support cybersecurity drills and reporting for AI scenarios.
• Maintain information and cyber security standards and baselines.
• Define IT security framework to guard against cyber risk.
• Manage security checks on new tools introduced into the bank.
• Support policy implementations for End Point Protection, DLP, APT, WAF, etc.
• Drive cybersecurity projects including scope, vendors, and implementation.
• Improve SIEM correlation and use-case development.
• Develop SOC and establish KPIs to measure attack and defense.
• Use automation to ensure platform/network security to standards.
• Conduct security risk assessments for apps and infrastructure.
• Liaise with internal/external parties during audits.
• Review security events/logs from in-house and market intel.

Skills

Info security

SIEM

Endpoint security

Network security

Threat intelligence

Education

Bachelor in Information Technology

Tools

Windows

Unix/Linux

Firewall

IDS/IPS

WAF

DLP

SIEM

Job description

China CITIC Bank International Limited seeks a seasoned security professional to lead IT security initiatives for AI-related risk controls in Hong Kong. The role covers advisory for overseas IT teams, security drills, standards maintenance, and governance across endpoints, networks, and applications.

Applicants should have 5+ years in IT with security focus, relevant cybersecurity certifications, and familiarity with HK regulatory requirements to support a complex financial network.