CYBER SECURITY AND RISK ANALYST / CYBER SECURITY ENGINEER

Henderson Land Development Company Limited; Hong Kong; On-site; HKD 420,000 - 660,000; Full time

Benefits offered by this job

Fringe benefits

Job summary

Henderson Land Development Company Limited is seeking a skilled Cyber Security Operations professional in Hong Kong. You will coordinate with a SOC, manage vulnerability remediation, and oversee multi-cloud CSPM across environments.

The role requires 3+ years in security operations, hands-on SIEM/EDR, scripting skills, and cloud security experience. Strong English and Putonghua communication is essential.

Qualifications

• Degree in Computer Science, IT, Cyber Security or related disciplines.
• Minimum 3 years' solid experience in cyber security operations or SOC.
• Hands-on with SIEM, EDR/XDR and vulnerability scanners.
• Scripting ability in Python, PowerShell, and Bash for automation.
• Knowledge of Windows/Linux administration, networking, firewalls and enterprise infra.
• Experience with cloud security (AWS/Azure), CSPM tools or PAM solutions is a strong advantage.
• Familiar with MITRE ATT&CK, ISO 27001, OWASP Top 10 and CIS Controls.
• Security qualifications such as CEH, CHFI, ITIL, CISSP, CISA are an advantage.
• Experience with AI-assisted security operations and AI governance is a plus.
• Excellent English and Chinese (Putonghua) communication.

Responsibilities

• Coordinate with outsourced SOC to triage, investigate and respond to security alerts and incidents.
• Manage vulnerability scanning, classify findings, enforce remediation SLAs and communicate threat updates.
• Administer Cloud Security Posture Management across multi-cloud accounts; monitor compliance and drive remediation.
• Operate Privileged Access Management, including user lifecycle, session recording and access reviews.
• Support incident response, including containment, evidence preservation, root-cause analysis and post-incident reporting.
• Propose and implement security enhancements, including device hardening, firewall controls, SIEM rules and automation scripts.
• Conduct regular cyber-attack simulations and internal security assessments.
• Facilitate audit exercises; maintain policies and compliance documentation (ISO 27001, NIST CSF).
• Review and maintain cyber security policies, standards and procedures in line with guidelines.
• Leverage AI tools & automation to improve security investigation, detection engineering and operational efficiency.

Skills

SIEM & EDR

Scripting: Python

Cloud security

PAM / CSPM

MITRE ATT&CK

ISO 27001

Bilingual English/Chinese

Analytical mindset

Education

Bachelor's degree in Computer Science or related field

Tools

Splunk

Wazuh

XSIAM

Cortex XDR

Palo Alto

Fortinet

Job description

• Co-ordinate with outsourced Security Operations Centre (SOC) to triage, investigate and respond to security alerts & incidents
• Manage vulnerability scanning, classify findings, enforce remediation SLAs and communicate threat updates
• Administer Cloud Security Posture Management across multi-cloud accounts; monitor compliance and drive remediation
• Operate Privileged Access Management, including user lifecycle, session recording and access reviews
• Support incident response, including containment, evidence preservation, root-cause analysis and post-incident reporting
• Propose and implement security enhancements, including device hardening, firewall controls, SIEM detection rules and automation scripts
• Conduct regular cyber-attack simulations and internal security assessments
• Facilitate audit exercises; maintain policies and compliance documentation (ISO 27001, NIST CSF)
• Review and maintain cyber security policies, standards & procedures in compliance with information security and risk management guidelines
• Leverage AI tools & automation to improve security investigation, detection engineering and operational efficiency

Requirements

• Degree in Computer Science, IT, Cyber Security or related disciplines
• Minimum 3 years' solid experience in cyber security operations or SOC
• Hands-on with SIEM (Splunk, Wazuh, Palo Alto XSIAM), EDR / XDR (Cortex XDR preferred) and vulnerability scanners
• Scripting ability in Python, PowerShell, and / or Bash for automation and analysis
• Knowledge of Windows / Linux administration, networking, firewalls (Palo Alto / Fortinet) and enterprise infrastructure
• Experience with cloud security (AWS / Azure), CSPM tools or PAM solutions is a strong advantage
• Familiar with MITRE ATT&CK, ISO 27001, OWASP Top 10 and CIS Controls
• Possess relevant security qualifications such as CEH, CHFI, ITIL, CCSA, CISSP and CISA is an advantage
• Experience with AI-assisted security operations (LLM, SOAR automation, AI-agent workflows) and understanding of AI security governance is a plus
• Good command of both written and spoken English and Chinese including Putonghua
• Self-motivated team player with strong analytical and problem-solving skills
• Candidates with less experience will be considered for the post of Cyber Security Engineer

Attractive salary and fringe benefits will be offered to the successful candidates.

Personal data provided by job applicants will be used for recruitment purpose only.