Cybersecurity Engineer – DevSecOps & Cloud Security

Ascendion; Hong Kong; On-site; HKD 420,000 - 660,000; Full time

Job summary

Ascendion is seeking a hands‑on Cybersecurity Engineer to secure complex, mission‑critical systems across project implementation and live production environments.

The role covers infrastructure security, OS hardening, DevSecOps, container platforms, vulnerability management, IAM, and security operations, collaborating with security leads, infrastructure, and SOC teams. Learn more at ascendion.com.

Qualifications

• 3–7 years of relevant cybersecurity, infrastructure security or related technical security experience.
• Hands‑on experience implementing security controls in project or production environments.
• Practical knowledge of OS patching and hardening across RHEL/Linux and Windows.
• Familiarity with virtualization platforms such as VMware and Azure Stack.
• Familiarity with security technologies such as SAST, DAST, SIEM or vulnerability scanners.
• Ability to troubleshoot security issues and provide practical solutions.

Responsibilities

• Implement security controls based on approved designs and standards.
• Perform OS patching and security hardening.
• Support remediation validation, patch tracking and baseline compliance.
• Apply controls across virtualized and container platforms (OpenShift/Kubernetes, VMware, Azure Stack).
• Support Kubernetes/container security including RBAC, secrets management, network policies, image security.
• Integrate security controls within CI/CD pipelines.
• Work with SAST, DAST, SCA and container/image‑scanning tools.
• Review vulnerabilities and drive remediation and closure.
• Support security‑risk assessments, audit evidence and go‑live readiness.

Skills

Hands-on security

OS patching & hardening

Vulnerability management

DevSecOps

Container security (OpenShift/Kuben)

CI/CD security integration

Tools

OpenShift/Kubernetes

VMware

Azure Stack

SAST/DAST tooling

Job description

Ascendion is seeking a hands‑on Cybersecurity Engineer to secure complex, mission‑critical systems across project implementation and live production environments.

The role covers infrastructure security, OS hardening, DevSecOps, container platforms, vulnerability management, IAM, and security operations, collaborating with security leads, infrastructure, and SOC teams. Learn more at ascendion.com.