Cybersecurity Operations Engineer

Newtone Consulting; Hong Kong; On-site; HKD 420,000 - 660,000; Part time

Job summary

Newtone Consulting seeks an IT Security Engineer to strengthen the security posture of our enterprise IT environment. You will work with infrastructure, applications, and operations teams to identify security risks, perform vulnerability assessments, monitor compliance, and drive remediation.

This role blends hands-on technical work with security governance, focusing on reporting, dashboards, and continuous improvement while staying current with threats and industry best practices.

Qualifications

• 2-5 years of cybersecurity experience.
• Hands-on with cybersecurity platforms and vulnerability management.
• Experience in vulnerability assessments and remediation coordination.
• Familiar with security monitoring, reporting, and compliance.
• Strong communication and analytical skills.
• Certifications (e.g., Security+, CEH, CISA, CISSP) are an advantage.

Responsibilities

• Perform vulnerability assessments and security reviews.
• Monitor security posture and identify risks and deviations.
• Coordinate remediation with infrastructure and operations teams.
• Produce security dashboards and KPI reports on vulnerabilities.
• Support audits and ensure regulatory compliance.
• Develop and maintain security documentation and procedures.
• Recommend improvements to strengthen security posture.
• Stay current with cyber threats and best practices.

Skills

SIEM

PAM

2FA

EDR

Endpoint protection

Vulnerability management

SOAR

Security reporting

Security governance

Threat detection

Education

Diploma or Degree in Computer Science / Information Security

Tools

Windows/Linux

Networking basics

Incident response tooling

Job description

Newtone Consulting seeks an IT Security Engineer to strengthen the security posture of our enterprise IT environment. You will work with infrastructure, applications, and operations teams to identify security risks, perform vulnerability assessments, monitor compliance, and drive remediation.

This role blends hands-on technical work with security governance, focusing on reporting, dashboards, and continuous improvement while staying current with threats and industry best practices.