Senior InfoSecurity Engineer - AM (Perm, Inhouse)

Morgan McKinley; Hong Kong; On-site; HKD 900,000 - 1,300,000; Full time

Job summary

Morgan McKinley seeks an experienced Cyber Security professional to manage security monitoring, incident handling, and threat analysis for enterprise IT. You will lead triage across SIEM, EDR, and network gateways, coordinate remediation, and implement robust controls across Windows, Linux, cloud, and IAM/PAM environments.

The role requires 5 years IT experience including 2+ years in a SOC, with hands-on security tool proficiency and strong communication skills in a multi-laceted environment in

Qualifications

• Bachelor's degree in Computer Science, Cyber Security, or related discipline.
• 5 years of IT experience, including 2+ years in a SOC or cyber security role.
• Hands-on experience in security monitoring, event investigation, alert triage, and incident handling.
• Practical experience supporting security solutions (firewalls, IDS/IPS, proxies, email/endpoint security, vulnerability scanners, SIEM, IAM/PAM, and encryption).
• Strong grasp of TCP/IP networking, Windows, and Linux/UNIX system administration.
• Experience with cloud, AD, network, or application security; familiarity with ISO 27001 or HKMA C-RAF.
• Strong analytical problem-solving abilities, clear communication, and the capacity to collaborate under pressure.

Responsibilities

• Monitor, triage, and analyze security logs and alerts across SIEM, EDR, and network gateways; lead end-to-end incident handling.
• Oversee server vulnerability scans, prioritize remediation, and enforce patching lifecycles in Windows/Linux environments.
• Deliver actionable configuration guidance across networks, cloud workloads, OS, and IAM/PAM systems.
• Administer and optimize the enterprise ZTNA platform; onboard apps, tune adaptive access policies, monitor performance.
• Track emerging attack vectors across cloud, on-premises, and mobile ecosystems; implement technical controls aligned with ISO 27001/HKMA C-RAF.

Skills

Security monitoring

Incident response

Threat analysis

Vulnerability assessment

Networking TCP/IP

Windows administration

Linux administration

Cloud security

Communication skills

Cantonese

English

Mandarin

Education

Bachelor's in CS/Cyber Security

Tools

Firewalls

IDS/IPS

Proxies

Email security

Endpoint security

Vulnerability scanners

SIEM

IAM/PAM

Encryption

Job description

Responsibility:

• Monitor, triage, and analyze security logs and alerts across SIEM, EDR, and network gateways. Lead end-to-end incident handling, investigating phishing emails, malicious domains, and endpoint anomalies to rapidly contain threats.
• Oversee server vulnerability scans, prioritize remediation, and collaborate with IT teams to enforce timely patching lifecycles and harden Windows/Linux environments against common exploits.
• Deliver actionable configuration guidance across network perimeters, cloud workloads, operating systems, and Identity and Privileged Access Management (IAM/PAM) systems.
• Administer and optimize the enterprise Zero Trust Network Access (ZTNA) platform. Onboard applications, tune adaptive access policies, monitor performance, and troubleshoot connectivity to ensure secure, resilient access.
• Track emerging attack vectors across cloud, on-premises, and mobile ecosystems. Implement technical controls that maintain operational alignment with internal security policies and regulatory frameworks like ISO 2701​ and HKMA C-RAF.

Job Requirements:

• Bachelor's in Computer Science, Cyber Security, or related discipline
• With 5 years of IT experience, including 2+ years in a SOC or cyber security role.
• Hands‑on experience in security monitoring, event investigation, alert triage, and incident handling.
• Practical experience supporting security solutions (firewalls, IDS/IPS, proxies, email/endpoint security, vulnerability scanners, SIEM, IAM/PAM, and encryption).
• Strong grasp of TCP/IP networking, Windows, and Linux/UNIX system administration.
• Experience with cloud, AD, network, or application security; familiarity with ISO 27001 or HKMA C-RAF
• Strong analytical problem‑solving abilities, clear communication skills, and the capacity to collaborate effectively under pressure.
• Proficient in Cantonese, English and Mandarin

Our specialist consultant Wendy will get in touch with you soon, if we find your profile suitable for this position or any other vacancies we are recruiting for.