Security Operations Analyst: Incident Response & Forensics

Cathay Pacific; Hong Kong; On-site; HKD 600,000 - 900,000; Full time

Job summary

Cathay Pacific is seeking a hands-on IT security professional to protect and strengthen Cathay’s technology landscape. You will execute and monitor security controls across endpoints, networks, privileged access, cloud environments, and SaaS platforms to maintain a strong security posture.

Working on incident response and emerging threat analysis, you will conduct investigations and forensics, maintain clear documentation, and educate stakeholders on security events.

Qualifications

• 6+ years of IT experience with at least 3 years in IT security.
• Professional certifications such as CISSP, CISM, CRISC, or ISO 27001 Lead Auditor are preferred.
• Knowledge of ISO/IEC 27001 and PCI DSS is required.

Responsibilities

• Execute and operate IT security solutions across endpoints, network, cloud, and SaaS platforms.
• Review and approve security requests in line with policies and controls.
• Maintain security hygiene across the IT network and systems.
• Perform basic threat hunting to identify emerging threats.
• Investigate security incidents including incident response and forensic analysis.
• Collaborate with business units and external partners to address security challenges.
• Coordinate with third-party vendors to support incident response.
• Support audits by collecting evidence and updating documentation.

Skills

IT security operations

Threat hunting

Incident response

Digital forensics

Documentation and reporting

Education

Bachelor’s degree in Information Technology / Cyber Security

Tools

SIEM

Endpoint protection

Cloud security

PAM

Job description

Cathay Pacific is seeking a hands-on IT security professional to protect and strengthen Cathay’s technology landscape. You will execute and monitor security controls across endpoints, networks, privileged access, cloud environments, and SaaS platforms to maintain a strong security posture.

Working on incident response and emerging threat analysis, you will conduct investigations and forensics, maintain clear documentation, and educate stakeholders on security events.