SOC Threat & Incident Response Engineer (Automation)

Robert Half Hong Kong Limited; Hong Kong; On-site; HKD 420,000 - 700,000; Full time

Job summary

Robert Half Hong Kong Limited is seeking a Security Operations Engineer to support the SOC for a mega-size critical project, focusing on threat detection, incident response, and real-time triage across enterprise SIEM platforms.

You will monitor alerts, investigate potential breaches, and develop playbooks and SOAR workflows while collaborating with infrastructure teams to tune SIEMs and reduce false positives.

Qualifications

• 2–4+ years in SOC operations or security engineering.
• Experience configuring or querying enterprise SIEM tools across multiple platforms.
• Fundamental knowledge of networks, OS security, and common attack vectors.

Responsibilities

• Monitor security alerts and perform real-time triage for a mega-size project.
• Investigate potential breaches and execute containment procedures.
• Ingest log sources, build detection rules, and maintain dashboards across SIEMs.
• Develop and refine SOC playbooks and SOAR workflows.
• Conduct root-cause analysis after incidents and tune alerting to reduce false positives.

Skills

SOC operations

Threat monitoring

Incident response

SIEM experience

Analytical troubleshooting

Change management

Tools

Splunk

Microsoft Sentinel

Elastic

QRadar

Job description

Robert Half Hong Kong Limited is seeking a Security Operations Engineer to support the SOC for a mega-size critical project, focusing on threat detection, incident response, and real-time triage across enterprise SIEM platforms.

You will monitor alerts, investigate potential breaches, and develop playbooks and SOAR workflows while collaborating with infrastructure teams to tune SIEMs and reduce false positives.