Senior InfoSecurity Engineer - AM (Perm, Inhouse)
Morgan McKinley
Hong Kong
Full time
Permanent
On-site
Competitive
About the job
Responsibility:
- Monitor, triage, and analyze security logs and alerts across SIEM, EDR, and network gateways. Lead end-to-end incident handling, investigating phishing emails, malicious domains, and endpoint anomalies to rapidly contain threats.
- Oversee server vulnerability scans, prioritize remediation, and collaborate with IT teams to enforce timely patching lifecycles and harden Windows/Linux environments against common exploits.
- Deliver actionable configuration guidance across network perimeters, cloud workloads, operating systems, and Identity and Privileged Access Management (IAM/PAM) systems.
- Administer and optimize the enterprise Zero Trust Network Access (ZTNA) platform. Onboard applications, tune adaptive access policies, monitor performance, and troubleshoot connectivity to ensure secure, resilient access.
- Track emerging attack vectors across cloud, on-premises, and mobile ecosystems. Implement technical controls that maintain operational alignment with internal security policies and regulatory frameworks like ISO 27001 and HKMA C-RAF.
- Bachelor's in Computer Science, Cyber Security, or related discipline
- With 5 years of IT experience, including 2+ years in a SOC or cyber security role.
- Hands-on experience in security monitoring, event investigation, alert triage, and incident handling.
- Practical experience supporting security solutions (firewalls, IDS/IPS, proxies, email/endpoint security, vulnerability scanners, SIEM, IAM/PAM, and encryption).
- Strong grasp of TCP/IP networking, Windows, and Linux/UNIX system administration.
- Experience with cloud, AD, network, or application security; familiarity with ISO 27001 or HKMA C-RAF
- Strong analytical problem-solving abilities, clear communication skills, and the capacity to collaborate effectively under pressure.
- Proficient in Cantonese, English and Mandarin
Morgan McKinley