CYBER SECURITY AND RISK ANALYST / CYBER SECURITY ENGINEER

Henderson Land Development Company Limited; Hong Kong; On-site; HKD 480,000 - 720,000; Full time

Job summary

Henderson Land Development Company Limited is seeking an experienced Cyber Security Operations professional in Hong Kong to guard and optimize our security posture. You will triage alerts with an outsourced SOC, manage vulnerabilities, and oversee cloud security across multi-cloud environments.

You will implement PAM, conduct incident response, and drive security enhancements with automation. The role requires hands-on SIEM/EDR/XDR, cloud security experience, and strong analytical capabilities.

Qualifications

• Bachelor degree in CS/IT/Cyber Security or related field.
• Minimum 3 years’ experience in cyber security operations or SOC.
• Hands-on with SIEM (Splunk, Wazuh, Palo Alto XSIAM), EDR/XDR (Cortex XDR preferred) and vulnerability scanners.
• Scripting in Python, PowerShell, and/or Bash for automation.
• Knowledge of Windows/Linux admin, networking, firewalls (Palo Alto/Fortinet).
• Experience with cloud security (AWS/Azure) and CSPM or PAM is a plus.
• Familiar with MITRE ATT&CK, ISO 27001, OWASP Top 10 and CIS Controls.
• Security qualifications such as CEH, CHFI, ITIL, CCSA, CISSP, CISA are advantages.
• English and Chinese including Putonghua; self-motivated team player.

Responsibilities

• Coordinate with outsourced SOC to triage, investigate and respond to security alerts and incidents.
• Manage vulnerability scanning, classify findings, enforce remediation SLAs and communicate threat updates.
• Administer Cloud Security Posture Management across multi-cloud accounts; monitor compliance and drive remediation.
• Operate Privileged Access Management, including user lifecycle, session recording and access reviews.
• Support incident response, including containment, evidence preservation, root-cause analysis and post-incident reporting.
• Propose and implement security enhancements, including device hardening, firewall controls, SIEM detection rules and automation scripts.
• Conduct regular cyber-attack simulations and internal security assessments.
• Facilitate audit exercises; maintain policies and compliance documentation (ISO 27001, NIST CSF).
• Review and maintain cyber security policies, standards & procedures in compliance with information security and risk management guidelines.
• Leverage AI tools & automation to improve security investigation, detection engineering and operational efficiency.

Skills

SIEM

EDR/XDR

Scripting: Python

PowerShell

Bash

Cloud security

CSPM

PAM

Firewalling

Windows/Linux

Networking

ISO 27001

MITRE ATT&CK

CIS Controls

CISSP

CISA

Putonghua (Mandarin)

English communication

Education

Degree in Computer Science, IT, Cyber Security or related disciplines

Tools

Splunk

Wazuh

Palo Alto XSIAM

Cortex XDR

Vulnerability Scanners

AWS

Azure

PAM solutions

Job description

• Co-ordinate with outsourced Security Operations Centre (SOC) to triage, investigate and respond to security alerts & incidents
• Manage vulnerability scanning, classify findings, enforce remediation SLAs and communicate threat updates
• Administer Cloud Security Posture Management across multi-cloud accounts; monitor compliance and drive remediation
• Operate Privileged Access Management, including user lifecycle, session recording and access reviews
• Support incident response, including containment, evidence preservation, root-cause analysis and post-incident reporting
• Propose and implement security enhancements, including device hardening, firewall controls, SIEM detection rules and automation scripts
• Conduct regular cyber-attack simulations and internal security assessments
• Facilitate audit exercises; maintain policies and compliance documentation (ISO 27001, NIST CSF)
• Review and maintain cyber security policies, standards & procedures in compliance with information security and risk management guidelines
• Leverage AI tools & automation to improve security investigation, detection engineering and operational efficiency

Requirements:

• Degree in Computer Science, IT, Cyber Security or related disciplines
• Minimum 3 years’ solid experience in cyber security operations or SOC
• Hands-on with SIEM (Splunk, Wazuh, Palo Alto XSIAM), EDR / XDR (Cortex XDR preferred) and vulnerability scanners
• Scripting ability in Python, PowerShell, and / or Bash for automation and analysis
• Knowledge of Windows / Linux administration, networking, firewalls (Palo Alto / Fortinet) and enterprise infrastructure
• Experience with cloud security (AWS / Azure), CSPM tools or PAM solutions is a strong advantage
• Familiar with MITRE ATT&CK, ISO 27001, OWASP Top 10 and CIS Controls
• Possess relevant security qualifications such as CEH, CHFI, ITIL, CCSA, CISSP and CISA is an advantage
• Experience with AI-assisted security operations (LLM, SOAR automation, AI-agent workflows) and understanding of AI security governance is a plus
• Good command of both written and spoken English and Chinese including Putonghua
• Self-motivated team player with strong analytical and problem-solving skills
• Candidates with less experience will be considered for the post of Cyber Security Engineer

Attractive salary and fringe benefits will be offered to the successful candidates.

Personal data provided by job applicants will be used for recruitment purpose only.