Cybersecurity Manager/ Blue Team Lead | Large Scale Bank

What You'll Do

• Drive threat detection, threat hunting, incident response and cyber defence initiatives across on-premise and cloud environments.
• Tune and optimize SIEM, EDR, SOAR and security monitoring platforms to improve detection coverage and response effectiveness.
• Investigate security incidents, conduct root cause analysis, and coordinate containment, eradication and recovery activities.
• Develop and implement detection use cases, correlation rules, threat intelligence and cyber-hunting methodologies.
• Partner with Red Team, Threat Intelligence, Infrastructure and Application Security teams to improve the Bank's overall security posture.
• Conduct security assessments and identify gaps in monitoring, logging and detection controls.
• Support cyber exercises, attack simulations and incident response preparedness activities.
• Research emerging threats, TTPs and attack vectors, and translate findings into actionable detection and defence measures.
• Provide technical leadership and mentorship to junior security analysts and engineers.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related disciplines.
• Strong communication skills in English and Chinese.
• Minimum 5 years of hands-on experience in Security Operations, Incident Response, Threat Hunting, Detection Engineering, Blue Team Operations, or Cyber Defence.
• Strong technical background in enterprise security environments, preferably within Banking, Financial Services, Large Enterprises, MSSPs or Cyber Security Consultancies.
• Hands-on experience with SIEM platforms (Splunk, QRadar, Sentinel, ELK), EDR solutions, SOAR platforms and Threat Intelligence tools.
• Strong knowledge of Windows, Linux, Active Directory, Networking, Cloud Security (Azure/AWS/GCP), MITRE ATT&CK Framework and Cyber Kill Chain.
• Experience in incident investigation, malware analysis, threat hunting and detection rule development.
• Familiarity with scripting or automation using Python, PowerShell or SQL is highly preferred.

If you're interested in this role, click 'apply now' to submit your CV.