Security Engineer (East)

Combuilder Pte Ltd; Hong Kong; On-site; HKD 480,000 - 780,000; Full time

Job summary

Combuilder Pte Ltd is seeking an experienced Security Engineer with 6 years in cybersecurity operations, network security, firewall administration, and cloud security to safeguard enterprise environments.

You will lead threat monitoring, incident response, vulnerability management, and security governance, while providing infrastructure support during quieter periods to ensure continuity and service availability.

Qualifications

• 6+ years in cybersecurity operations or security engineering.
• Hands-on with Check Point Firewall and CloudGuard.
• Experience safeguarding enterprise Cisco switching environments.
• Knowledge of VMware NSX security and virtualization.
• Familiarity with security governance and compliance frameworks.

Responsibilities

• Monitor, investigate, and respond to cybersecurity incidents and alerts.
• Conduct threat hunting, forensic analysis, and incident investigations.
• Analyze security logs to identify malicious activity and risks.
• Support security assessments, remediation plans, and root cause analysis.
• Manage Check Point Firewall policies, NAT, VPN, and threat prevention.
• Implement cloud security controls and perform cloud risk assessments.
• Administer Broadcom VMware NSX and micro-segmentation.
• Coordinate vulnerability assessments and security audits.
• Contribute to security policy development and awareness initiatives.
• Provide infrastructure and systems support during lower security demand.

Skills

Cybersecurity operations

Incident response

Threat hunting

Security governance

Communication

Education

Bachelor's Degree in IT/Cybersecurity/CS

Tools

Check Point Firewall

Check Point CloudGuard

Cisco Switching

Broadcom VMware NSX

IAM

IPS/IDS

VPN technologies

Job description

An experienced Security Engineer with 6 years of expertise in cybersecurity operations, network security, firewall administration, cloud security, and infrastructure protection. Responsible for safeguarding enterprise environments through proactive threat monitoring, incident response, vulnerability management, and security governance. The role also provides infrastructure and systems support during periods of lower security operational demand to ensure operational continuity and service availability.

Key Responsibilities

Primary Responsibilities: Cybersecurity (70-80%)

Security Operations & Incident Response

• Monitor, investigate, and respond to cybersecurity incidents and security alerts.
• Conduct threat hunting, forensic analysis, and incident investigations.
• Analyze security logs and events to identify malicious activities and security risks.
• Support security assessments, remediation plans, and root cause analysis.

Network & Firewall Security

• Manage and administer Check Point Firewall environments, including policy creation, NAT configuration, IPS, VPN, application control, and threat prevention.
• Monitor firewall performance and optimize security policies in line with security standards.
• Support network segmentation and secure network architecture initiatives.

Cloud Security

• Implement and maintain security controls for cloud environments utilizing Check Point CloudGuard.
• Monitor cloud security posture and ensure compliance with organizational security requirements.
• Perform cloud risk assessments and vulnerability management.

Data Center & Virtualization Security

• Administer and secure Broadcom VMware NSX environments.
• Implement micro-segmentation policies and network security controls within virtualized infrastructure.
• Support network virtualization security architecture and troubleshooting activities.

Security Governance & Compliance

• Conduct vulnerability assessments and coordinate remediation activities.
• Support internal and external security audits.
• Develop and maintain security policies, standards, and procedures.
• Ensure compliance with cybersecurity frameworks and regulatory requirements.

Security Improvement & Automation

• Recommend and implement security enhancements.
• Participate in infrastructure and security projects.
• Support security awareness initiatives and technical security consultations.

Secondary Responsibilities: Infrastructure & Systems Support (20-30%)

Network Infrastructure Support

• Configure, maintain, and troubleshoot Cisco Switches and network infrastructure.
• Support LAN/WAN connectivity, VLAN configurations, routing, switching, and network performance optimization.
• Assist with network upgrades, migrations, and capacity planning.

Systems Administration

• Support Windows and Linux servers.
• Perform patch management, system monitoring, and maintenance activities.
• Support virtualization platforms and infrastructure services.

Operational Support

• Monitor system health and infrastructure availability.
• Support backup, recovery, and disaster recovery activities.
• Participate in scheduled maintenance and service improvement initiatives.

Required Technical Skills

Security Technologies

• Check Point Firewall Administration
• Check Point CloudGuard
• Security Incident Response
• Vulnerability Management
• Security Monitoring and Threat Detection
• Security Governance and Compliance
• VPN Technologies
• IPS/IDS Solutions
• Identity and Access Management (IAM)

Networking Technologies

• Cisco Switching Technologies
• TCP/IP, Routing, Switching
• VLAN Configuration
• Network Segmentation
• LAN/WAN Infrastructure

Virtualization & Cloud

• Broadcom VMware NSX
• VMware Infrastructure
• Micro-Segmentation
• Cloud Security Architecture
• Hybrid Cloud Security

Operating Systems

• Windows Server Administration
• Linux Server Administration

Preferred Qualifications

Education

• Bachelor's Degree in Information Technology, Cybersecurity, Computer Science, or related discipline will be added advantage.

Experience

• Minimum 6 years of experience in Cybersecurity, Network Security, or Security Engineering.
• Hands‑on experience with Check Point Firewall and CloudGuard solutions.
• Experience managing enterprise Cisco switching environments.
• Experience supporting Broadcom VMware NSX security and virtualization environments.

Preferred Certifications

• Check Point Certified Security Administrator (CCSA)
• Check Point Certified Security Expert (CCSE)
• Cisco CCNA / CCNP
• VMware NSX Certification
• CISSP
• CISM
• CompTIA Security+

Key Competencies

• Strong cybersecurity incident management and troubleshooting skills.
• Excellent knowledge of firewall and network security technologies.
• Strong understanding of cloud security and virtualization security concepts.
• Ability to work independently and collaboratively across infrastructure and security teams.
• Excellent analytical, documentation, and communication skills.
• Strong problem‑solving and stakeholder management capabilities.

Note:

The role as a Security Engineer specializing in Check Point Firewall, CloudGuard, Cisco Networking, and Broadcom VMware NSX, while retaining system and infrastructure support as a secondary responsibility during operational quiet periods.