about the company.
The hiring company is looking for cybersecurity professional to join the APAC team to focus to handle Hong Kong's security incident response and readiness, operating advanced security tools to identify and combat threats, managing vulnerabilities, and implementing robust security solutions.
...
about the job
- Hands-on Threat Management:Directly monitor, investigate, analyze, and mitigate security incidents and threats using SIEM, EDR, IDS/IPS, and SOAR solutions.
- Perform technical forensic analysis and root cause investigations for security breaches.
- Conduct regular technical vulnerability assessments (VAPT) and security audits.
- Prioritize and directly implement security patches for operating systems, networks, and applications.
- Actively support and execute hardening efforts for IT systems and infrastructure.
- Operate, manage, and maintain a suite of security tools, including HIDS, NIDS, IPS, WAF, SIEM, DLP, IAM, and endpoint protection.
- Identify emerging threats and attack vectors impacting enterprise security.
- Recommend and implement technical mitigation strategies to enhance overall cybersecurity posture.
- Ensure technical configurations and processes comply with security frameworks (e.g., ISO 27001, PCI-DSS, NIST) and support audit requirements.
- Develop, refine, and maintain incident response playbooks and technical security procedures.
- Assist in the rapid technical identification and deployment of mitigation/remediation solutions
skills & experiences required.
- Bachelor's degree in Computer Science, Information Security, or a related field.
- 5+ years of hands-on experience in cybersecurity operations, SOC environments, or IT security engineering.
- Strong technical knowledge of cloud security (AWS, Azure, GCP) and on-premise security architectures.
- Proven experience with firewalls, IDS/IPS, SIEM, EDR, and encryption technologies.
- Direct hands-on experience in penetration testing and vulnerability management.
- Solid understanding of security frameworks and compliance standards (e.g., ISO 27001, NIST, PCI-DSS).
- Relevant certifications (e.g., CISSP, CISM, CEH, OSCP, Security+) are a significant advantage.
- Strong analytical mindset with excellent problem-solving capabilities.
- Ability to perform effectively under pressure and respond to critical incidents in real time.
- Excellent communication skills to articulate technical security risks and incidents clearly.
- Proficient in English
- Visa holders are welcomed
If you’re interested in this exciting opportunity please don’t delay and click APPLY NOW for more information you can reach out to Wendy Fung at wendy.fung@randstad.com.hk with the resume.