IT Security engineer

Newtone Consulting; Hong Kong; On-site; HKD 420,000 - 660,000; Part time

Job summary

Newtone Consulting seeks an IT Security Engineer to strengthen the security posture of our enterprise IT environment. You will work with infrastructure, applications, and operations teams to identify security risks, perform vulnerability assessments, monitor compliance, and drive remediation.

This role blends hands-on technical work with security governance, focusing on reporting, dashboards, and continuous improvement while staying current with threats and industry best practices.

Qualifications

• 2-5 years of cybersecurity experience.
• Hands-on with cybersecurity platforms and vulnerability management.
• Experience in vulnerability assessments and remediation coordination.
• Familiar with security monitoring, reporting, and compliance.
• Strong communication and analytical skills.
• Certifications (e.g., Security+, CEH, CISA, CISSP) are an advantage.

Responsibilities

• Perform vulnerability assessments and security reviews.
• Monitor security posture and identify risks and deviations.
• Coordinate remediation with infrastructure and operations teams.
• Produce security dashboards and KPI reports on vulnerabilities.
• Support audits and ensure regulatory compliance.
• Develop and maintain security documentation and procedures.
• Recommend improvements to strengthen security posture.
• Stay current with cyber threats and best practices.

Skills

SIEM

PAM

2FA

EDR

Endpoint protection

Vulnerability management

SOAR

Security reporting

Security governance

Threat detection

Education

Diploma or Degree in Computer Science / Information Security

Tools

Windows/Linux

Networking basics

Incident response tooling

Job description

About the role

We're looking for an IT Security Engineer to strengthen the security posture of our enterprise IT environment. You'll work closely with infrastructure, application, and operations teams to identify security risks, perform vulnerability assessments, monitor compliance, and drive remediation activities. This role is ideal for someone who enjoys both hands‑on technical work and security governance, with a strong focus on reporting, continuous improvement, and operational security.

Key responsibilities

• Perform vulnerability assessments and security reviews across infrastructure and applications.
• Monitor security posture and identify security risks, gaps, and compliance deviations.
• Coordinate remediation activities with infrastructure, application, and operations teams.
• Produce security dashboards, KPI reports, and management updates on vulnerabilities and remediation progress.
• Support security audits and ensure compliance with internal security standards and regulatory requirements.
• Develop and maintain security documentation, procedures, and operational guidelines.
• Recommend improvements to strengthen the organization's overall security posture.
• Stay current with emerging cyber threats, vulnerabilities, and industry best practices.

About you

• Diploma or Degree in Computer Science, Cybersecurity, Information Security, or a related discipline.
• 2-5 years of experience in cybersecurity, vulnerability management, or IT security operations.
• Hands‑on experience with cybersecurity platforms such as SIEM, PAM, 2FA, EDR, endpoint protection, vulnerability management, SOAR.
• Experience conducting vulnerability assessments and coordinating remediation activities.
• Familiarity with security monitoring, reporting, and security compliance processes.
• Good understanding of infrastructure, operating systems, networking, and application security.
• Experience preparing security reports and presenting findings to technical and business stakeholders.
• Strong analytical, troubleshooting, and communication skills.
• Security certifications (e.g., Security+, CEH, CISA, CISSP, or equivalent) are an advantage.