全职 Senior Security Engineer 工作, 薪水, Dah Chong Hong Holdings Limited Hong Kong 公司招聘中 - Ricebowl

Dah Chong Hong, Ltd is a diversified business conglomerate specializing in three core businesses—Mobility, Consumer, and Healthcare & Logistics—serving partners and customers across Hong Kong, mainland China and Southeast Asia markets. We invite candidates with the requisite profile to apply for the following position:

Division: Group Digital and Technology

Responsibilities
Security Operations

• Operate, monitor, and maintain core security products and platforms, including but not limited to firewalls, mail gateways, XDR, SOC monitoring, SIEM, Identity and Access Management (IAM), and vulnerability management solutions
• Respond to security alerts and incidents, performing initial triage, investigation, and escalation in accordance with established procedures
• Manage firewall rule reviews, policy changes, and configuration updates to ensure continued protection and compliance
• Conduct routine health checks, patching, and tuning of security appliances and systems to maintain optimal performance

Vulnerability and Threat Management

• Perform regular vulnerability scans, analyze results, and coordinate remediation efforts with relevant teams
• Track and report on the status of identified vulnerabilities through to closure
• Stay informed of emerging threats, vulnerabilities, and industry best practices

Incident Response

• Execute initial containment actions to limit the spread or impact of an incident, such as isolating affected hosts, blocking malicious indicators, or disabling compromised accounts, in line with approved playbooks
• Conduct initial investigation of security incidents, including log analysis, correlation of events across multiple sources, and identification of indicators of compromise
• Gather and preserve relevant evidence in accordance with established procedures to support investigation and potential forensic review

Audit, Compliance, and Assessments

• Support ISO (e.g., ISO 27001) and Internal Audit (IA) activities, including evidence gathering, documentation, and remediation tracking
• Participate in security drills, tabletop exercises, and security assessments to validate organizational readiness

• Assist in maintaining security policies, standards, and operating procedures

Security Awareness and Training

• Support the planning and delivery of security awareness training and phishing simulation campaigns
• Help promote a strong security culture across the organization

Documentation and Reporting

• Maintain accurate operational documentation, runbooks, and configuration records
• Prepare periodic security reports and metrics for management review

• High Diploma or above in Information Technology, Computer Science, Cybersecurity, or a related discipline
• Certifications such as CISSP/CISM/CISA would be an advantage
• 2 to 5 years, junior to middle level candidates are welcome, relevant hands-on experience in a security operations or IT security role is preferred
• Practical, hands-on knowledge of one or more enterprise security products, such as Palo Alto, Fortinet, Sangfor, Hillstone, or equivalent firewall platform
• Familiarity with SIEM, XDR, IAM, mail gateway, and vulnerability management tools is highly desirable
• Solid understanding of networking fundamentals (TCP/IP, routing, switching, VPN, NAT) and common security concepts
• Understanding of common attack techniques, threat vectors, and defensive controls
• Experience supporting security audits and compliance activities (e.g., ISO 27001, internal audits) is an advantage
• Strong analytical and problem-solving abilities with attention to detail
• Good communication skills, both written and verbal
• Ability to work independently as well as collaboratively within a team
• Willingness to participate in on-call rotation or respond to incidents outside normal business hours when required

We are equal opportunities employer. Applicants who are not invited within 2 months may consider their application unsuccessful. All applicants may be considered for other suitable positions with DCH Group/CITIC Group and will be deleted from our files after 6 months from the date of application.