Information Technology Security Engineer

Midland Holdings Limited; Hong Kong; On-site; HKD 480,000 - 720,000; Part time

Job summary

Midland Holdings Limited is seeking a Security Specialist to own and strengthen security controls across in-house IT operations and outsourced services. The role emphasizes securing the SDLC, conducting regular vulnerability assessments, and coordinating incident response.

The candidate will act as the security advisor, stay ahead of threats, and drive AI security governance including LLMs and agents within the organization.

Qualifications

• 3–5 years hands-on info security experience (IR, SecOps, forensics).
• Solid knowledge of TCP/IP networking and security products.
• Proficiency with Windows and Linux/UNIX environments.
• Knowledge of AAA, email/web security, PKI, encryption, EPP.

Responsibilities

• Own and strengthen security controls across in-house and outsourced IT ops.
• Champion secure SDLC and secure coding practices for in-house apps.
• Lead vulnerability assessments, pen tests, and patching of critical vulns.

Skills

Security incidents

Networking (TCP/IP)

Windows/Linux

Core security tech

Threat understanding

Education

Degree in Information Security/CS/IT

Tools

Firewalls

IDPS

Web proxies

Job description

• Own and continuously strengthen security controls across in-house IT operations and outsourced services, in line with company policies and industry standards
• Champion secure SDLC and secure coding practices for in-house developed applications
• Lead regular vulnerability assessments and penetration tests across IT systems and network infrastructure, and drive timely patching of critical vulnerabilities
• Define and own the Computer Security Incident Response process — including escalation channels, diagnosis, and coordinating remediation with internal and external stakeholders
• Build and maintain dashboards and metrics on cyber threats and vulnerabilities for management reporting
• Govern the secure adoption of AI across the organisation, including LLMs and AI agents
• Act as the go-to security advisor for teams across the business
• Stay ahead of emerging cyber-attack threats and evolving mitigation techniques

Requirements

• Degree in Information Security, Computer Science, IT, or a related field
• 3–5 years' hands-on experience in information security — incident response, security operations, or computer forensics
• Solid knowledge of TCP/IP networking and security products (firewalls, IDPS, web proxies)
• Proficiency with Windows and Linux/UNIX environments
• Working knowledge of core security technologies: AAA, email/web security, PKI, encryption, endpoint protection
• Strong understanding of attack techniques (APT, DDoS, malware, phishing) and corresponding investigation and response methodologies

Nice to Have

• Security certifications such as CISSP, OSCP, GIAC, CEH, CISM, or CISA
• Experience with security frameworks and standards: ISO 27001, C-RAF, COBIT, CIS Critical Controls
• Background in security vendors or law enforcement
• Exposure to AI security governance — e.g. OWASP Top 10 for LLMs, Agent 365, Power Platform, or similar AI risk frameworks
• Experience in IT/security project management, product evaluation, and vendor management