全职 Senior Security Engineer 工作, 薪水, Dah Chong Hong Kowloon Peninsula, Hong Kong 公司招聘中 - Ricebowl

Key Responsibilities:

Security Operations 

• Operate, monitor, and maintain core security products and platforms, including but not limited to firewalls, mail gateways, XDR, SOC monitoring, SIEM, Identity and Access Management (IAM), and vulnerability management solutions

• Respond to security alerts and incidents, performing initial triage, investigation, and escalation in accordance with established procedures

• Manage firewall rule reviews, policy changes, and configuration updates to ensure continued protection and compliance

• Conduct routine health checks, patching, and tuning of security appliances and systems to maintain optimal performance

Vulnerability and Threat Management 

• Perform regular vulnerability scans, analyze results, and coordinate remediation efforts with relevant teams

• Track and report on the status of identified vulnerabilities through to closure

• Stay informed of emerging threats, vulnerabilities, and industry best practices

Incident Response 

• Execute initial containment actions to limit the spread or impact of an incident, such as isolating affected hosts, blocking malicious indicators, or disabling compromised accounts, in line with approved playbooks

• Conduct initial investigation of security incidents, including log analysis, correlation of events across multiple sources, and identification of indicators of compromise

• Gather and preserve relevant evidence in accordance with established procedures to support investigation and potential forensic review

Audit, Compliance, and Assessments 

• Support ISO (e.g., ISO 27001) and Internal Audit (IA) activities, including evidence gathering, documentation, and remediation tracking

• Participate in security drills, tabletop exercises, and security assessments to validate organizational readiness

• Assist in maintaining security policies, standards, and operating procedures

Security Awareness and Training 

• Support the planning and delivery of security awareness training and phishing simulation campaigns

• Help promote a strong security culture across the organization

Documentation and Reporting 

• Maintain accurate operational documentation, runbooks, and configuration records

• Prepare periodic security reports and metrics for management review

Qualifications:

• High Diploma or above in Information Technology, Computer Science, Cybersecurity, or a related discipline

• Certifications such as CISSP/CISM/CISA would be an advantage

• 2 to 5 years, junior to middle level candidates are welcome, relevant hands-on experience in a security operations or IT security role is preferred

• Practical, hands-on knowledge of one or more enterprise security products, such as Palo Alto, Fortinet, Sangfor, Hillstone, or equivalent firewall platform 

• Familiarity with SIEM, XDR, IAM, mail gateway, and vulnerability management tools is highly desirable. 

• Solid understanding of networking fundamentals (TCP/IP, routing, switching, VPN, NAT) and common security concepts. 

• Understanding of common attack techniques, threat vectors, and defensive controls. 

• Experience supporting security audits and compliance activities (e.g., ISO 27001, internal audits) is an advantage. 

• Strong analytical and problem-solving abilities with attention to detail. Good communication skills, both written and verbal. Ability to work independently as well as collaboratively within a team. 

• Willingness to participate in on-call rotation or respond to incidents outside normal business hours when required. 
  

We offer competitive salary, discretionary bonus, medical insurance, life and personal accident insurance, annual leave and staff purchase discount. Interested candidates please send your resume with salary expectation by email or clicking "Quick apply".

We are equal opportunities employer. Applicants who are not invited within 2 months may consider their application unsuccessful. All applicants may be considered for other suitable positions with DCH Group / CITIC Pacific Group and will be deleted from our files after 6 months from the date of application.