Senior InfoSecurity Engineer / AM (Perm, Inhouse)

Morgan Mckinley Limited; Hong Kong; Sur place; HKD 420 000 - 780 000; Plein temps

Avantages offerts par ce poste

Health insurance

Career progression opportunities

Résumé du poste

Morgan McKinley Limited is seeking an experienced security specialist to monitor logs, triage alerts, and lead incident response across SIEM/EDR and network gateways.

You will coordinate vulnerability remediation, harden Windows/Linux environments, and implement ZTNA policies while aligning with ISO 27001 and HKMA C-RAF requirements. Cantonese, English, and Mandarin are valued.

Qualifications

• Bachelor's in Computer Science, Cyber Security, or related discipline.
• With 5 years of IT experience, including 2+ years in a SOC or cyber security role.
• Hands-on experience in security monitoring, event investigation, alert triage, and incident handling.
• Practical experience supporting security solutions (firewalls, IDS/IPS, proxies, email/endpoint security, vulnerability scanners, SIEM, IAM/PAM, and encryption).
• Strong grasp of TCP/IP networking, Windows, and Linux/UNIX system administration.
• Experience with cloud, AD, network, or application security; familiarity with ISO 27001 or HKMA C-RAF
• Strong analytical problem-solving abilities, clear communication skills, and the capacity to collaborate effectively under pressure.
• Proficient in Cantonese, English and Mandarin

Responsabilités

• Monitor, triage, and analyze security logs and alerts across SIEM, EDR, and network gateways.
• Lead end-to-end incident handling, investigating phishing emails, malicious domains, and endpoint anomalies to rapidly contain threats.
• Oversee server vulnerability scans, prioritize remediation, and collaborate with IT teams to enforce timely patching lifecycles.
• Deliver actionable configuration guidance across network perimeters, cloud workloads, operating systems, and IAM/PAM systems.
• Administer and optimize the enterprise ZTNA platform, onboard applications, tune adaptive access policies, monitor performance, and troubleshoot connectivity.

Connaissances

Security monitoring

Incident handling

Event triage

TCP/IP networking

Windows administration

Linux administration

Cloud security

ISO 27001

Languages: Cantonese/English/Mandarin

Formation

Bachelor's degree in CS/Cyber Security

Outils

SIEM

EDR

Vulnerability scanners

IAM/PAM

Description du poste

• Monitor, triage, and analyze security logs and alerts across SIEM, EDR, and network gateways. Lead end-to-end incident handling, investigating phishing emails, malicious domains, and endpoint anomalies to rapidly contain threats.
• Oversee server vulnerability scans, prioritize remediation, and collaborate with IT teams to enforce timely patching lifecycles and harden Windows/Linux environments against common exploits.
• Deliver actionable configuration guidance across network perimeters, cloud workloads, operating systems, and Identity and Privileged Access Management (IAM/PAM) systems.
• Administer and optimize the enterprise Zero Trust Network Access (ZTNA) platform. Onboard applications, tune adaptive access policies, monitor performance, and troubleshoot connectivity to ensure secure, resilient access.
• Track emerging attack vectors across cloud, on-premises, and mobile ecosystems. Implement technical controls that maintain operational alignment with internal security policies and regulatory frameworks like ISO 27001 and HKMA C-RAF.

Job Requirements:

• Bachelor's in Computer Science, Cyber Security, or related discipline
• With 5 years of IT experience, including 2+ years in a SOC or cyber security role.
• Hands-on experience in security monitoring, event investigation, alert triage, and incident handling.
• Practical experience supporting security solutions (firewalls, IDS/IPS, proxies, email/endpoint security, vulnerability scanners, SIEM, IAM/PAM, and encryption).
• Strong grasp of TCP/IP networking, Windows, and Linux/UNIX system administration.
• Experience with cloud, AD, network, or application security; familiarity with ISO 27001 or HKMA C-RAF
• Strong analytical problem-solving abilities, clear communication skills, and the capacity to collaborate effectively under pressure.
• Proficient in Cantonese, English and Mandarin