Lead Analyst, Digital Security

AIA Hong Kong and Macau; Malaysia; On-site; MYR 120,000 - 180,000; Full time

Job summary

AIA Hong Kong and Macau is seeking a Security Platform Operations & Engineering Specialist to manage day-to-day operations of enterprise security platforms, including SIEM, SOAR, and Data Security solutions. You will monitor health, perform proactive maintenance, and drive platform enhancements across Chronicle, Splunk SOAR, and related integrations within a global team.

The role requires hands-on Linux/Windows administration, Azure cloud, Kubernetes, and scripting (Python/PowerShell).

Qualifications

• 2–3 years experience in Information Security, Security Engineering, or related operations.
• Experience with enterprise-scale security platforms in production environments.
• Familiarity with audit, compliance, or regulatory requirements is a plus.

Responsibilities

• Operate and monitor enterprise security platforms (SIEM, SOAR, Data Security).
• Perform maintenance, tuning, and health checks; ensure platform health and capacity.
• Design, implement, and maintain integrations between security platforms and enterprise systems.
• Develop automation to streamline security tasks and incident response processes.
• Lead incident management activities and coordinate with internal teams and vendors.
• Support audit and compliance activities with required evidence and documentation.

Skills

SIEM

SOAR

Data Security

Platform Operations

Kubernetes

Azure

Python

PowerShell

REST APIs

Incident Management

Tools

Chronicle

Splunk SOAR

BigID Data Discovery

ServiceNow

Azure Administrator Operations

Kubernetes Platforms

Job description

At AIA we've started an exciting movement to create a healthier, more sustainable future for everyone. As pioneering innovators for over 100 years, we're now transforming our organisation to be faster, simpler and more connected. Because we want to be even better equipped to develop digital solutions and experiences that help more people live Healthier, Longer, Better Lives. To get there, we need people with tech/digital/analytics expertise and passion to help develop positive, sustainable change through digitally enhanced experiences that will impact the lives of millions of people and create a healthier future for everyone. If you believe in developing a better tomorrow, read on.

About the Role The Security Platform Operations & Engineering Specialist is responsible for the operation, maintenance, enhancement, and support of enterprise security platforms, including SIEM, SOAR, and Data Security solutions. This role combines platform operations, engineering, automation, incident management, compliance support, and stakeholder engagement responsibilities. The successful candidate will play a key role in ensuring security platforms remain stable, scalable, compliant, and aligned with business and regulatory requirements

Key Responsibilities

Security Platform Operations

• Manage day-to-day operations and administration of enterprise security platforms, including SIEM, SOAR, and Data Security platforms.
• Monitor platform health, service availability, performance, and capacity utilization.
• Perform proactive platform maintenance, system tuning, and health checks.

Platform Engineering & Automation

• Support platform deployment, upgrades, migrations, and patch management activities.
• Design, implement, and maintain integrations between security platforms and enterprise systems.
• Develop automation playbook to automate routine security tasks such as threat intelligence lookups, alert enrichment, incident response processes, and vulnerability scanning.
• Support onboarding of new data sources, use cases, and security technologies.
• Create and maintain technical documentation, operational manual, and standard operating procedure.

Incident & Problem Management

• Troubleshoot and resolve platform, infrastructure, integration, and data ingestion issues.
• Coordinate with internal teams, vendors, and external partners to resolve complex technical problems.
• Continue to track, monitor, and follow up on Incidents, Changes, and Problems throughout their lifecycle.
• Conduct root cause analysis (RCA) and implement corrective and preventive actions.
• Participate in major incident management activities and service restoration efforts.

Audit, Compliance & Governance Support

• Partner with Internal Audit teams to support audit activities.
• Provide audit evidence, operational documentation, system records, and technical explanations when required.
• Support remediation activities arising from audit findings and compliance assessments.
• Ensure security platforms operate in accordance with organizational policies, standards, and regulatory requirements.

Stakeholder Engagement

• Manage and fulfill user requests within agreed service levels.
• Provide technical support and consultation to BU security, infrastructure, and application teams.
• Collaborate with BU stakeholders on platform enhancements and operational improvements.
• Participate in project delivery and platform transformation initiatives.

Required Qualifications

Experience

• At least 2-3 years of experience in Information Security, Security Engineering, Security Platform Operations, System Administration, or Infrastructure Operations.
• Experience supporting enterprise-scale security platforms in production environments.
• Experience working within Incident, Problem, and Change Management processes.
• Experience supporting audit, compliance, or regulatory requirements is preferred.

Technical Skills

Security Platforms

• Hands-on experience with SIEM technologies, in-depth knowledge of Google SecOps (Chronicle) is highly preferred.
• Experience with SOAR technologies and security automation workflows, e.g. Chronicle, Splunk SOAR.
• Understanding of security monitoring architecture and log management concepts.

Infrastructure & Cloud

• Strong knowledge of Linux and Windows administration.
• Experience with Microsoft Azure services and cloud operations.
• Hands-on Kubernetes (K8S) administration and troubleshooting experience.
• Understanding of networking fundamentals, including DNS, TCP/IP, HTTP/HTTPS, Syslog, and security-related protocols.

Automation & Integration

• Experience in Python and/or PowerShell scripting.
• Experience with REST APIs based system integrations.
• Experience automating operational tasks and platform management activities.
• Experience leveraging AI-powered tools (e.g., Microsoft Copilot) to improve operational efficiency, automate repetitive tasks, accelerate troubleshooting, enhance documentation quality, and support platform engineering activities.

Preferred Qualifications

Experience with:

• Google SecOps, Splunk, QRadar SIEM & SOAR
• BigID Data Discovery
• ServiceNow
• Azure Administrator Operation
• Kubernetes Platforms

Professional certifications such as:

• Security Certifications such as CISSP / CCSP.
• Azure Certifications such as SC-500, AZ-104
• CKA - Certified Kubernetes Administrator
• ITIL v4 Foundation Certification.

Key Competencies

• Strong troubleshooting and analytical skills.
• Ability to work independently and manage multiple priorities.
• Proactively utilizes AI-powered tools to improve productivity, problem-solving, automation, and overall operational effectiveness.
• Strong ownership and accountability mindset.
• Excellent communication and stakeholder management skills.
• Ability to collaborate effectively across BU and cross-functional teams.
• Commitment to operational excellence and continuous improvement.

Build a career with us as we help our customers and the community live Healthier, Longer, Better Lives.

You must provide all requested information, including Personal Data, to be considered for this career opportunity. Failure to provide such information may influence the processing and outcome of your application. You are responsible for ensuring that the information you submit is accurate and up-to-date.

At AIA we've started an exciting movement to create a healthier, more sustainable future for everyone. It's about finding new ways to not only better people's lives, but to better the communities and environments we live in. As the largest listed company on the Hong Kong Stock Exchange, we've been proudly making a difference for people and communities across Asia for over a century. And we build on this every day with our ambition to engage one billion people to live Healthier, Longer, Better Lives by 2030. If you work at AIA, you play an important part in this movement. Which is why we give you every opportunity to learn, grow and shape your career - your way. Inspiring and supporting you to thrive - not just at work, but in life. Believe in better with AIA. View our AIA LinkedIn page Bring your difference to AIA