IT Security Engineer: Threat & Defense Architect

CLSA; Hong Kong; On-site; HKD 420,000 - 780,000; Full time

Job summary

CLSA is seeking an IT Security Analyst to join its international security team in Hong Kong. You will perform penetration testing, vulnerability assessments, and security reviews across on-prem and cloud environments, strengthening security controls and responses.

You will work with IT teams and business partners, stay updated on threats, and contribute to security strategy. Preference for CISSP/CISA/CISM and hands-on tool experience (Burp Suite, Metasploit, ZAP, Qualys, Nessus, Nmap).

Qualifications

• Bachelor Degree in IT or Computer Science or related field.
• 3-5 years of cybersecurity experience with regulatory knowledge.
• Certifications such as CISSP, CISA, CISM preferred; offensive security certs (OSCP/OSWP/OSEP) a plus.
• Experience in Big4, IT consultancies, or Cyber Threat Intelligence welcomed.
• Hands-on with penetration testing and vulnerability scanning tools (Burp Suite, Metasploit, ZAP, Qualys, Nessus, Nmap).
• Strong English and Chinese communication and project management skills.
• Experience in offensive security services across web, network, server, client apps, mobile, AI, IoT.

Responsibilities

• Conduct penetration testing, vulnerability scanning and code review on IT systems and technologies.
• Perform architecture reviews and security assessments of IT designs, configurations, and source code (On-Prem & Cloud).
• Conduct cyber-attack simulations using red/blue/purple team exercises.
• Prepare reports with identified vulnerabilities and remediation recommendations.
• Review access for vendors and guests across IT systems and services.
• Assist in evaluating, designing and implementing security solutions like Web App Firewalls, SSO/MFA, PKI, AI red teaming, Zero Trust.

Skills

Penetration testing

Vulnerability assessment

Security architecture

Communication skills (EN & CN)

Project management

Regulatory knowledge

Education

Bachelor's degree in IT/Computer Science

Tools

Burp Suite

Metasploit

ZAP

Qualys

Tenable/Nessus

Nmap

Job description

CLSA is seeking an IT Security Analyst to join its international security team in Hong Kong. You will perform penetration testing, vulnerability assessments, and security reviews across on-prem and cloud environments, strengthening security controls and responses.

You will work with IT teams and business partners, stay updated on threats, and contribute to security strategy. Preference for CISSP/CISA/CISM and hands-on tool experience (Burp Suite, Metasploit, ZAP, Qualys, Nessus, Nmap).