IT Security Engineer - Incident Response & Threat Modeling

EX.IO; Hong Kong; On-site; HKD 420,000 - 720,000; Full time

Job summary

EX.IO seeks an IT Security Engineer to strengthen cyber defenses in Hong Kong. You will protect system boundaries, secure data, and harden networks against attacks while handling incident response and security assessments.

Candidates should have a CS or engineering degree, 3+ years in cyber security, knowledge of blockchain security, and familiarity with standards like NIST 800-53. Experience with Linux, shell scripting, and incident management is essential.

Qualifications

• Bachelor degree in CS or related engineering from a top-tier university.
• 3+ years of experience in cyber security.
• Strong knowledge of cyber security attack vectors.
• Blockchain security knowledge.
• Familiar with compliance standards such as NIST 800-53.
• Experience with SIEM, NIDS, HIPS, and incident response management.
• Proficiency with Linux and shell scripting.
• Preference for familiarity with Crypto or TradFi industries.

Responsibilities

• Responding to security incidents.
• Coordinating incident response across teams.
• Performing security assessments and code audits.
• Developing technical solutions to security vulnerabilities.
• Researching new attack vectors and developing threat models.
• Automating security improvements.
• Coordinating penetration testing with external vendors.

Skills

Cyber security

Incident response

Threat modeling

Code audits

Blockchain security

Linux

Shell scripting

Crypto/tradfi familiarity

Education

Bachelor in CS or Engineering

Tools

SIEM

NIDS

HIPS

Job description

EX.IO seeks an IT Security Engineer to strengthen cyber defenses in Hong Kong. You will protect system boundaries, secure data, and harden networks against attacks while handling incident response and security assessments.

Candidates should have a CS or engineering degree, 3+ years in cyber security, knowledge of blockchain security, and familiarity with standards like NIST 800-53. Experience with Linux, shell scripting, and incident management is essential.