Network & Security Engineer (HK$40K - $50K+)

Global Executive Consultants Ltd.; Hong Kong; On-site; HKD 446,000 - 558,000; Full time

Job summary

Global Executive Consultants Ltd. is seeking a Network & Security Engineer in Hong Kong to design, implement and optimize advanced network security controls for a public sector client.

The role requires hands-on experience with NGFW, WAF, anti-DDoS, IDPS and NDR, plus scripting for automation. Strong English communication and ability to liaise with regional teams are essential.

Qualifications

• Bachelor's degree in CS/IT or related field.
• 3+ years of hands-on network security engineering experience.
• Proven expertise in NGFW, WAF, anti-DDoS, IDPS, NDR, API protection.
• Experience with firewall management and analysis tools.
• Professional certifications such as CISSP, CCNA Security, PCNSE, or NSE.

Responsibilities

• Design, implement, manage, and optimize network security controls, including NGFW, WAF, anti-DDoS, IDPS, NDR, API protection, and orchestration platforms.
• Identify, assess, and track network security vulnerabilities and configuration weaknesses. Lead mitigation efforts to closure.
• Review and advise on network security design for new IT projects and on-prem/cloud architectures, ensuring alignment with policies and standards.
• Participate in security incident response, including on-call support outside business hours. Coordinate DR drills and testing.
• Develop and maintain security SOPs, standards, and guidelines; ensure compliance with policies and legal requirements.
• Collaborate with IT teams, business units, and vendors to resolve complex issues and manage changes.

Skills

NGFW/WAF

Vuln assessment

Incident response

Scripting automation

English/Mandarin

Education

Bachelor's degree

Tools

Palo Alto

Fortinet

Check Point

HillStone

Akamai

Alibaba Cloud

Tufin

Vectra

Python

PowerShell

Ansible

Job description

Network & Security Engineer (HK$40K - $50K+) (Ref. No.: 27858)

Our client, a public sector is looking for high-calibre person to fill the position.

Job Duties

• Design, implement, manage, and optimize network security controls, including NGFW, WAF, anti-DDoS, IDPS, NDR, API protection, and network security policy orchestration platforms.
• Identify, assess, and track network security vulnerabilities and configuration weaknesses. Lead and verify mitigation efforts to closure.
• Review and advise on network security design for new IT projects and on-premises/cloud architectures, ensuring alignment with security policies, standards, and industry best practices.
• Participate in security incident response, including on-call support outside regular business hours. Coordinate and execute DR drills and security-focused non-functional testing.
• Develop and maintain security operational procedures, standards, and guidelines. Ensure security operations comply with internal policies and legal/regulatory requirements.
• Collaborate with internal IT teams, business units, and external vendors to resolve complex technical issues and manage change implementations.

Job Requirements

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• 3+ years of hands-on network security engineering experience in a sizable organization.
• Proven expertise in NGFW (e.g., Palo Alto, Fortinet, Check Point, HillStone), WAF (e.g., Akamai, Alibaba Cloud Firewall), anti-DDoS, IDPS, NDR (e.g., Vectra), API protection, and network security policy orchestration platforms (e.g., Tufin), plus network infrastructure and related technologies.
• Experience with firewall management and analysis tools.
• Professional certifications such as CISSP, CCNA Security, PCNSE, or NSE.
• Familiarity with ITIL frameworks.
• Experience with scripting (Python, PowerShell, Ansible) for security task automation.
• Strong analytical and problem-solving skills, with the ability to work independently under pressure and tight deadlines.
• Excellent interpersonal and communication skills, with fluency in spoken and written English. Proficiency in Mandarin is desirable for liaising with regional teams and stakeholders.