Cyber Security Specialist (Cloud) | AMK/Project Site | Permanent #5252

PERSOL; Hong Kong; On-site; HKD 420,000 - 700,000; Full time

Job summary

PERSOL is seeking a Cyber Security Specialist to architect, design, review and implement resilient cyber security solutions across products and projects. The role focuses on cloud security, risk assessment, vulnerability management and security controls to ensure systems and applications operate in a safe and secure environment.

The specialist will monitor, research and analyse security risks, identify vulnerabilities and recommend effective mitigation measures.

Qualifications

• Degree or diploma in Cyber Security, Information Technology, Computer Science or a related field. A degree in Cyber Security will be an advantage
• Strong knowledge of cloud security, networking, hardware, software and system administration
• Strong understanding of cloud architecture and data traffic flow, networking concepts and the OSI model
• Knowledge of cyber security principles including defence-in-depth, anti-malware and anti-virus protection
• Hands-on knowledge of vulnerability assessment, security testing and VAPT
• Familiarity with cloud security solutions and public cloud platforms such as Azure, AWS, GCP and Huawei Cloud
• Familiarity with IM8 requirements, CIS benchmarks and NIST security standards
• Knowledge of security assessment and vulnerability scanning tools
• Strong understanding of application, infrastructure and cloud security risks
• Ability to identify vulnerabilities and understand potential attack methods, recommend practical and effective security mitigation measures

Responsibilities

• Develop and implement cloud security architectures and solutions
• Monitor, research and analyze cyber security risks, threats and attacks
• Design security solutions to protect cloud services, applications and data
• Implement preventative and corrective security controls
• Conduct regular security and risk assessments for system solutions
• Support security-related audits and implementation reviews
• Provide security consultancy on software, hardware and infrastructure vulnerabilities
• Plan and conduct Vulnerability Assessment and Penetration Testing (VAPT)
• Analyze VAPT results and provide recommendations for remediation
• Provide security guidelines covering secure coding, key management, system hardening, patch management, backup management and incident management
• Assess application and infrastructure security against client requirements and corporate security policies
• Perform preliminary security scans using relevant cyber security tools
• Ensure security solutions align with relevant IM8 requirements, CIS and NIST security benchmarks
• Work with public cloud platforms including Azure, AWS, GCP and Huawei Cloud
• Recommend appropriate mitigation measures to reduce security risks and improve overall system resilience

Skills

Cloud security

Risk assessment

Vulnerability management

Security controls

Security consultancy

VAPT

Public cloud platforms

Education

Degree in Cyber Security/IT/CS

Tools

Cyber security tools

Vulnerability scanners

Cloud security solutions

Job description

Job Summary:

We are looking for a Cyber Security Specialist to architect, design, review and implement resilient cyber security solutions across products and projects. The role focuses on cloud security, risk assessment, vulnerability management and security controls to ensure systems and applications operate in a safe and secure environment.

The specialist will monitor, research and analyse security risks, identify vulnerabilities and recommend effective mitigation measures. The role will also provide security consultancy and support projects in improving system stability, security and compliance.

Job Descriptions:

• Develop and implement cloud security architectures and solutions




• Monitor, research and analyze cyber security risks, threats and attacks




• Design security solutions to protect cloud services, applications and data




• Implement preventative and corrective security controls




• Conduct regular security and risk assessments for system solutions




• Support security-related audits and implementation reviews




• Provide security consultancy on software, hardware and infrastructure vulnerabilities




• Plan and conduct Vulnerability Assessment and Penetration Testing (VAPT)




• Analyze VAPT results and provide recommendations for remediation




• Provide security guidelines covering secure coding, key management, system hardening, patch management, backup management and incident management




• Assess application and infrastructure security against client requirements and corporate security policies




• Perform preliminary security scans using relevant cyber security tools




• Ensure security solutions align with relevant IM8 requirements, CIS and NIST security benchmarks




• Work with public cloud platforms including Azure, AWS, GCP and Huawei Cloud




• Recommend appropriate mitigation measures to reduce security risks and improve overall system resilience

Job Requirements:

• Degree or diploma in Cyber Security, Information Technology, Computer Science or a related field. A degree in Cyber Security will be an advantage




• Strong knowledge of cloud security, networking, hardware, software and system administration




• Strong understanding of cloud architecture and data traffic flow, networking concepts and the OSI model




• Knowledge of cyber security principles including defence-in-depth, anti-malware and anti-virus protection




• Hands-on knowledge of vulnerability assessment, security testing and VAPT




• Familiarity with cloud security solutions and public cloud platforms such as Azure, AWS, GCP and Huawei Cloud




• Familiarity with IM8 requirements, CIS benchmarks and NIST security standards




• Knowledge of security assessment and vulnerability scanning tools




• Strong understanding of application, infrastructure and cloud security risks




• Ability to identify vulnerabilities and understand potential attack methods, recommend practical and effective security mitigation measures