Cybersecurity Specialist

KOS International Holdings; Hong Kong; On-site; HKD 600,000 - 780,000; Full time

Job summary

KOS International Holdings is seeking a Cybersecurity Specialist to strengthen in-house security operations in Hong Kong. You will liaise with an outsourced SOC and internal IT teams to investigate alerts, support incident response, and drive remediation across on-premises and cloud environments.

The role emphasizes vulnerability management, SIEM/EDR enhancements, and policy/documentation maintenance. Strong English and Chinese communication is required, with skills in scripting and security

Qualifications

• Degree in Computer Science, Information Technology, Cybersecurity or a related discipline.
• At least 3 years of hands-on security operations experience (SOC, incident response or related).
• Hands-on experience with SIEM, EDR/XDR and vulnerability-scanning tools.
• Ability to investigate security events and coordinate corrective actions with IT teams.
• Strong understanding of Windows/Linux environments, networking, firewalls and enterprise infrastructure.
• Scripting skills in Python, PowerShell and/or Bash.
• Familiarity with MITRE ATT&CK, ISO 27001, NIST CSF, OWASP Top 10 or CIS Controls.
• Good communication skills in English and Chinese, including Putonghua.

Responsibilities

• Work with the outsourced SOC to triage and investigate security alerts, assess their impact and coordinate response actions.
• Support incident containment, evidence preservation, root- cause analysis and post-incident reporting.
• Manage vulnerability scanning, prioritise findings and drive remediation with IT teams.
• Enhance SIEM, endpoint security and infrastructure security controls, including detection rules, device hardening and firewall controls.
• Administer cloud security posture and privileged access controls, including access reviews.
• Support security assessments, cyber-attack simulations, audits and maintenance of security policies and documentation.
• Use scripting and automation to improve security analysis and operational efficiency.

Skills

Security operations

Incident response

English/Chinese communication

Education

Degree in Computer Science/IT/Cybersecurity

Tools

SIEM

EDR/XDR

Vulnerability scanning tools

Python

PowerShell

Bash

Windows

Linux

Firewall controls

Job description

Overview

Our client, a well-established local enterprise, is seeking a Cybersecurity Specialist to strengthen its in-house security operations.

Working closely with an outsourced SOC and internal IT teams, you will investigate security alerts, support incident response and drive vulnerability remediation. This role offers exposure beyond monitoring, including security controls, cloud security and privileged access management.

Key Responsibilities

• Work with the outsourced SOC to triage and investigate security alerts, assess their impact and coordinate response actions.


• Support incident containment, evidence preservation, root-cause analysis and post-incident reporting.


• Manage vulnerability scanning, prioritise findings and work with IT teams to complete remediation within agreed timelines.


• Support and enhance SIEM, endpoint security and infrastructure security controls, including detection rules, device hardening and firewall controls.


• Administer and monitor cloud security posture and privileged access controls, including access reviews and remediation follow-up.


• Support security assessments, cyber-attack simulations, audits and the maintenance of security policies and documentation.


• Use scripting and automation to improve security analysis and operational efficiency.

Qualifications

• Degree in Computer Science, Information Technology, Cybersecurity or a related discipline.


• At least 3 years of hands-on experience in security operations, SOC, incident response or a closely related cybersecurity role.


• Practical experience with SIEM, EDR/XDR and vulnerability-scanning tools.


• Ability to investigate security events, assess findings and work with technical teams on corrective actions.


• A sound understanding of Windows/Linux environments, networking, firewalls and enterprise infrastructure.


• Scripting skills in Python, PowerShell and/or Bash.


• Familiarity with security frameworks and practices such as MITRE ATT&CK, ISO 27001, NIST CSF, OWASP Top 10 or CIS Controls.


• Good communication skills in English and Chinese, including Putonghua.

Useful Additional Experience

• Palo Alto Cortex XDR/XSIAM, Splunk or Wazuh.


• Palo Alto or Fortinet firewalls.


• AWS/Azure security, CSPM or PAM solutions.


• SOAR, AI-assisted security investigation or security automation.


• Relevant cybersecurity certifications.

Candidates with less experience may be considered for a Cyber Security Engineer position.