- Hong Kong Hong Kong
The Career Works Limited Hiring! Full Time Cybersecurity Specialist in Hong Kong - Ricebowl
Share
Save
Working Location
Job Description
Responsibilities
Our client is a Technology Service company is looking to hire Cybersecurity Specialist .
Responsibilities
Operate and tune the CNAPP platform: runtime threat detection, vulnerability management, compliance posture, and cloud security posture management (CSPM)
Monitor container runtime behaviour, respond to alerts, and lead incident triage for cloud-native threats
Conduct regular cluster hardening reviews against CIS Kubernetes Benchmark and NSA/CISA Kubernetes Hardening Guidance
Maintain continuous visibility into image vulnerabilities across the container registry and production workloads using solution of image scanning
Triage and track CVEs through their full lifecycle — severity classification, patch coordination with engineering, and residual risk acceptance
Partner with DevOps and platform engineering teams to embed security requirements into infrastructure-as-code (Terraform, Helm, Kustomize)
Develop and maintain runbooks, playbooks, and security baseline documentation for the engineering community
Requirement
Bachelor's degree in Computer Science, Information Security, Engineering, or a closely related discipline
Minimum 2 years of hands-on experience in cybersecurity roles focused on cloud-native or microservices environments
Experience with CNAPP platforms (like Sysdig, NeuVector, Aqua, Prisma Cloud, Lacework, Wiz etc) — configuration, policy management, and alert triage
Practical experience with container security concepts: image hardening, registry scanning, runtime protection, and supply chain risks
Fluent in English — written and spoken (documentation, cross-functional communication)
Fluent in Cantonese — spoken (team and stakeholder communication in Hong Kong)
Having the following experience will be an advantage
Any experience integrating security gates into CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins, Tekton): SAST, DAST, SCA, container scanning
Infrastructure-as-code security review: Terraform or Helm chart analysis
OWASP Top 10 and API Security Top 10 knowledge applied in microservices context
Understanding of authentication and authorisation patterns: OAuth 2.0, OIDC, JWT, mTLS
Full-time
Responsibilities
Operate and tune the CNAPP platform: runtime threat detection, vulnerability management, compliance posture, and cloud security posture management (CSPM)
Monitor container runtime behaviour, respond to alerts, and lead incident triage for cloud-native threats
Conduct regular cluster hardening reviews against CIS Kubernetes Benchmark and NSA/CISA Kubernetes Hardening Guidance
Maintain continuous visibility into image vulnerabilities across the container registry and production workloads using solution of image scanning
Triage and track CVEs through their full lifecycle — severity classification, patch coordination with engineering, and residual risk acceptance
Partner with DevOps and platform engineering teams to embed security requirements into infrastructure-as-code (Terraform, Helm, Kustomize)
Develop and maintain runbooks, playbooks, and security baseline documentation for the engineering community
Requirement
Bachelor's degree in Computer Science, Information Security, Engineering, or a closely related discipline
Minimum 2 years of hands-on experience in cybersecurity roles focused on cloud-native or microservices environments
Experience with CNAPP platforms (like Sysdig, NeuVector, Aqua, Prisma Cloud, Lacework, Wiz etc) — configuration, policy management, and alert triage
Practical experience with container security concepts: image hardening, registry scanning, runtime protection, and supply chain risks
Fluent in English — written and spoken (documentation, cross-functional communication)
Fluent in Cantonese — spoken (team and stakeholder communication in Hong Kong)
Having the following experience will be an advantage
Any experience integrating security gates into CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins, Tekton): SAST, DAST, SCA, container scanning
Infrastructure-as-code security review: Terraform or Helm chart analysis
OWASP Top 10 and API Security Top 10 knowledge applied in microservices context
Understanding of authentication and authorisation patterns: OAuth 2.0, OIDC, JWT, mTLS
Full-time
Important Information
Never provide your bank or credit card details when applying for jobs. Do not transfer any money or complete unrelated online surveys. If you see something suspicious, Report this Job ad.
Learn More