- Hong Kong Hong Kong
全职 Cybersecurity Specialist 工作, 薪水, The Career Works Limited Hong Kong 公司招聘中 - Ricebowl
分享
保存
工作地点
职位描述
岗位职责
Our client is a Technology Service company is looking to hire Cybersecurity Specialist .
Responsibilities
Operate and tune the CNAPP platform: runtime threat detection, vulnerability management, compliance posture, and cloud security posture management (CSPM)
Monitor container runtime behaviour, respond to alerts, and lead incident triage for cloud-native threats
Conduct regular cluster hardening reviews against CIS Kubernetes Benchmark and NSA/CISA Kubernetes Hardening Guidance
Maintain continuous visibility into image vulnerabilities across the container registry and production workloads using solution of image scanning
Triage and track CVEs through their full lifecycle — severity classification, patch coordination with engineering, and residual risk acceptance
Partner with DevOps and platform engineering teams to embed security requirements into infrastructure-as-code (Terraform, Helm, Kustomize)
Develop and maintain runbooks, playbooks, and security baseline documentation for the engineering community
Requirement
Bachelor's degree in Computer Science, Information Security, Engineering, or a closely related discipline
Minimum 2 years of hands-on experience in cybersecurity roles focused on cloud-native or microservices environments
Experience with CNAPP platforms (like Sysdig, NeuVector, Aqua, Prisma Cloud, Lacework, Wiz etc) — configuration, policy management, and alert triage
Practical experience with container security concepts: image hardening, registry scanning, runtime protection, and supply chain risks
Fluent in English — written and spoken (documentation, cross-functional communication)
Fluent in Cantonese — spoken (team and stakeholder communication in Hong Kong)
Having the following experience will be an advantage
Any experience integrating security gates into CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins, Tekton): SAST, DAST, SCA, container scanning
Infrastructure-as-code security review: Terraform or Helm chart analysis
OWASP Top 10 and API Security Top 10 knowledge applied in microservices context
Understanding of authentication and authorisation patterns: OAuth 2.0, OIDC, JWT, mTLS
Full-time
Responsibilities
Operate and tune the CNAPP platform: runtime threat detection, vulnerability management, compliance posture, and cloud security posture management (CSPM)
Monitor container runtime behaviour, respond to alerts, and lead incident triage for cloud-native threats
Conduct regular cluster hardening reviews against CIS Kubernetes Benchmark and NSA/CISA Kubernetes Hardening Guidance
Maintain continuous visibility into image vulnerabilities across the container registry and production workloads using solution of image scanning
Triage and track CVEs through their full lifecycle — severity classification, patch coordination with engineering, and residual risk acceptance
Partner with DevOps and platform engineering teams to embed security requirements into infrastructure-as-code (Terraform, Helm, Kustomize)
Develop and maintain runbooks, playbooks, and security baseline documentation for the engineering community
Requirement
Bachelor's degree in Computer Science, Information Security, Engineering, or a closely related discipline
Minimum 2 years of hands-on experience in cybersecurity roles focused on cloud-native or microservices environments
Experience with CNAPP platforms (like Sysdig, NeuVector, Aqua, Prisma Cloud, Lacework, Wiz etc) — configuration, policy management, and alert triage
Practical experience with container security concepts: image hardening, registry scanning, runtime protection, and supply chain risks
Fluent in English — written and spoken (documentation, cross-functional communication)
Fluent in Cantonese — spoken (team and stakeholder communication in Hong Kong)
Having the following experience will be an advantage
Any experience integrating security gates into CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins, Tekton): SAST, DAST, SCA, container scanning
Infrastructure-as-code security review: Terraform or Helm chart analysis
OWASP Top 10 and API Security Top 10 knowledge applied in microservices context
Understanding of authentication and authorisation patterns: OAuth 2.0, OIDC, JWT, mTLS
Full-time
重要安全守则
申请工作时，切勿提供您的银行或信用卡详细资料。不要转账或完成无关的在线调查问卷。如果您发现可疑内容，请举报此招聘广告。
了解更多