Cyber Security and Risk Analyst / Cyber Security Engineer

Responsibilities:
Co-ordinate with outsourced Security Operations Centre (SOC) to triage, investigate and respond to security alerts & incidents

Manage vulnerability scanning, classify findings, enforce remediation SLAs and communicate threat updates

Administer Cloud Security Posture Management across multi-cloud accounts; monitor compliance and drive remediation

Operate Privileged Access Management, including user lifecycle, session recording and access reviews

Support incident response, including containment, evidence preservation, root-cause analysis and post-incident reporting

Propose and implement security enhancements, including device hardening, firewall controls, SIEM detection rules and automation scripts

Conduct regular cyber-attack simulations and internal security assessments

Facilitate audit exercises; maintain policies and compliance documentation (ISO 27001, NIST CSF)

Review and maintain cyber security policies, standards & procedures in compliance with information security and risk management guidelines

Leverage AI tools & automation to improve security investigation, detection engineering and operational efficiency

Requirements:
Degree in Computer Science, IT, Cyber Security or related disciplines

Minimum 3 years’ solid experience in cyber security operations or SOC

Hands-on with SIEM (Splunk, Wazuh, Palo Alto XSIAM), EDR / XDR (Cortex XDR preferred) and vulnerability scanners

Scripting ability in Python, PowerShell, and / or Bash for automation and analysis

Knowledge of Windows / Linux administration, networking, firewalls (Palo Alto / Fortinet) and enterprise infrastructure

Experience with cloud security (AWS / Azure), CSPM tools or PAM solutions is a strong advantage

Familiar with MITRE ATT&CK, ISO 27001, OWASP Top 10 and CIS Controls

Possess relevant security qualifications such as CEH, CHFI, ITIL, CCSA, CISSP and CISA is an advantage

Experience with AI-assisted security operations (LLM, SOAR automation, AI-agent workflows) and understanding of AI security governance is a plus

Good command of both written and spoken English and Chinese including Putonghua

Self-motivated team player with strong analytical and problem-solving skills

Candidates with less experience will be considered for the post of Cyber Security Engineer

How to apply:
We offer attractive remuneration packages and fringe benefits to the right candidates.

Please send your resume with expected salary to us via:

Email: (Attached resume should be in MS Word or Plain Text format), OR

By Post: Human Resources Department, Henderson Land Development Company Limited, 71/F, Two International Finance Centre, 8 Finance Street, Central, Hong Kong. (Please quote reference code on the envelope)