APAC Cybersecurity Incident Response Lead

Richemont Iberia SL; Hong Kong; On-site; HKD 900,000 - 1,300,000; Full time

Job summary

Richemont Iberia SL in Hong Kong seeks a Senior Associate / Technical Lead, Cybersecurity Incident Response. You will operate at Level 3, escalating complex incidents and leading advanced investigations across endpoint, network, identity, cloud, and email environments.

You will mentor L1/L2 analysts, deploy detections, and strengthen playbooks, while contributing to threat hunting and automation. Fluency in English is essential; 5–8+ years in SOC/IR and strong MITRE ATT&CK knowledge are required.

Qualifications

• 5–8+ years of hands-on cybersecurity experience.
• Advanced knowledge of networking, operating systems, identity, cloud environments, and enterprise infrastructure.
• Experience with attacker techniques and MITRE ATT&CK framework.
• Proficiency with analytics languages such as SPL, KQL, SQL.
• Experience scripting with Python/PowerShell/Bash is advantageous.
• Ability to investigate ambiguous or complex cybersecurity incidents independently.

Responsibilities

• Act as the L3 technical escalation point for complex and high‑impact cybersecurity incidents.
• Lead advanced incident investigations and determine attack scope, root cause, attacker techniques, affected assets, identities, and potential business impact.
• Perform advanced forensic analysis, including evidence collection, timeline reconstruction, endpoint analysis, and suspicious file analysis.
• Lead proactive threat hunting activities and develop, validate detections across SIEM/EDR/identity/cloud platforms.
• Mentor L1/L2 analysts and review investigations for quality and accuracy.

Skills

Incident response

Threat hunting

Digital forensics

SIEM / SOAR

EDR/XDR

MITRE ATT&CK

KQL / SPL / SQL

Python / PowerShell

Cloud security

Networking knowledge

English communication

Tools

SIEM

SOAR

EDR/XDR

IDS/IPS

NDR

Cloud security platforms

Identity security

Email security

Job description

Richemont Iberia SL in Hong Kong seeks a Senior Associate / Technical Lead, Cybersecurity Incident Response. You will operate at Level 3, escalating complex incidents and leading advanced investigations across endpoint, network, identity, cloud, and email environments.

You will mentor L1/L2 analysts, deploy detections, and strengthen playbooks, while contributing to threat hunting and automation. Fluency in English is essential; 5–8+ years in SOC/IR and strong MITRE ATT&CK knowledge are required.