HK Senior Detection and Response Engineer

Sopra Steria; Hong Kong; Hybrid; HKD 900,000 - 1,200,000; Full time

Benefits offered by this job

Hybrid working mode

Work-from-Abroad benefits

Annual bonus

Certification opportunities

Job summary

Sopra Steria is seeking a Senior Detection and Response Engineer in Hong Kong to lead security usecase design, threat hunting, and incident response across a regional SOC. You will coordinate with APAC stakeholders to strengthen detection capabilities and ensure rapid response to security events.

Ideal candidates have 7+ years in cybersecurity, hands-on experience with SIEM and ELK, and strong scripting skills. Hybrid work arrangements and professional development are offered by Sopra Steria.

Qualifications

• Minimum 7+ years as security professional.
• 7+ years overall with 4+ years in security usecase design, development, coding.
• Experience in scripting languages: Python, PowerShell, Bash, SQL.
• Experience with ELK stack or similar SIEM.
• Professional credentials in IT security (e.g., SANS, CISSP, OSCP) are a plus.

Responsibilities

• Lead security usecase definition, design, implementation and enrichment within IT Production Security Investigation & Incident Response.
• Analyze threats, design detection usecases and guide mitigation where possible.
• Oversee detection capabilities of the 24/7 regional IT Production SOC.
• Respond to cyber/IT security incidents and assess severity of events.
• Identify recurring issues and drive process improvements and mitigations.
• Collaborate with APAC/Global stakeholders to ensure detection readiness and efficiency.
• continuously improve SOC processes and playbooks.

Skills

Security usecase design

Threat hunting

Incident response

SIEM

Linux

Java

Python scripting

PowerShell

Bash

SQL

Data analysis

Education

Bachelor's degree in IT security or related field

Tools

ELK (Elastic) Stack

SIEM platforms

Job description

Company Description

Sopra Steria is a listed European technology leader specializing in Consulting, Digital Services, and Software. With over 51,000 employees worldwide across Europe, North America and Asia, the Group supports organizations in driving their digital transformation and delivering sustainable business value.

Our Hong Kong entity operates alongside Singapore to deliver Infrastructure, Cloud and Cybersecurity services to clients across the Asia Pacific region.

For this position, we are looking for an Senior Detection and Response Engineer who can assist one of our clients - a leading investment bank.

Job Description

• Lead technical activities (security usecase definition, design, implementation & enrichment) in the team of IT Production Security Investigation & Incident Response based on real-world attack scenarios and framework like MITRE ATT&CK, ensuring robust security detection posture across various layers.
• Understand ongoing security threats in the wild and propose security usecase to detect and when possible, protect or mitigate.
• Be autonomous on technical activities (definition, R&D/threat hunting) in the team of IT Production Security Investigation & Incident Response and oversee the detection capabilities of the 24/7 regional IT Production SOC
• Respond to Cyber / IT security incidents and evaluates the type and severity of security events.
• Identify recurring security issues and risks and develops mitigation plans and recommends process improvements.
• Partner with global, regional and local stakeholders to ensure organizational and procedural efficiency and readiness for detection of suspicious events and reaction
• Continuously improve the processes to strengthen the current SOC framework via review of policies and operational playbooks

Contributing Responsibilities

• Partner with the APAC Business CSIRT for integrated security monitoring and alert/incident handling operations.
• Contribute to local security incident response outside the direct scope of responsibilities (i.e.,local IT production in some APAC business entities)
• Contribute to the Bank compliance with regulatory requirements and internal policies
• Contribute to the reporting of all incidents according to the Incident Management System
• Contribute to the control frameworks in day‑to‑day business activities, such as Control Plan;
• Participate to Audit interview and provide the require evidence

Qualifications

• Requires a minimum of 7 or more years of experience as security professional
• Experience in security usecase design/development with understanding of Java language.
• Good working knowledge of Linux (RedHat/Ubuntu).
• Working knowledge to interpret security logs or instructions into threat models. SecOPS-DevOPS mindset & skills.
• Experience and knowledge in investigating incidents, remediation, tracking and follow-up for incident closure with concerned teams, stakeholders.
• Thorough understanding of technologies and security concepts, with knowledge & hands on experience in SIEM Product and Security Incident Management
• Experience on incident response activities (threat hunting, event analysis, incident investigation, reporting)
• Comfortable working with and making the most of large data sets (collection, analysis, response), creating content/use cases/models and bringing an automation mindset.

• Candidate MUST have 7 or more years of experience on overall cybersecurity incident response with 4+ years specifically on security usecase design, development, coding
• Experience in common scripting languages such as Python, PowerShell, Bash, SQL
• Experience in SIEM on ELK(Elastic Logstash Kibana) stack is a plus
• Professional credentials in one of the relevant IT Security disciplines is a plus (SANS / CISSP / OSCP)

Additional Information

• Work-life balance: Hybrid working mode and Work-from-Abroad benefits, 18 days of Annual leave
• Health & insurance: Comprehensive coverage including General Practitioner, hospitalization
• Performance incentives: Annual bonus based on individual performance
• Learning & development: Training programs, certification opportunities, and training incentives to support career growth