Cybersecurity Specialist

Overview

Our client, a well-established local enterprise, is seeking a Cybersecurity Specialist to strengthen its in-house security operations.

Working closely with an outsourced SOC and internal IT teams, you will investigate security alerts, support incident response and drive vulnerability remediation. This role offers exposure beyond monitoring, including security controls, cloud security and privileged access management.

Key Responsibilities

• Work with the outsourced SOC to triage and investigate security alerts, assess their impact and coordinate response actions.
• Support incident containment, evidence preservation, root-cause analysis and post-incident reporting.
• Manage vulnerability scanning, prioritise findings and work with IT teams to complete remediation within agreed timelines.
• Support and enhance SIEM, endpoint security and infrastructure security controls, including detection rules, device hardening and firewall controls.
• Administer and monitor cloud security posture and privileged access controls, including access reviews and remediation follow-up.
• Support security assessments, cyber-attack simulations, audits and the maintenance of security policies and documentation.
• Use scripting and automation to improve security analysis and operational efficiency.

Qualifications

• Degree in Computer Science, Information Technology, Cybersecurity or a related discipline.
• At least 3 years of hands-on experience in security operations, SOC, incident response or a closely related cybersecurity role.
• Practical experience with SIEM, EDR/XDR and vulnerability-scanning tools.
• Ability to investigate security events, assess findings and work with technical teams on corrective actions.
• A sound understanding of Windows/Linux environments, networking, firewalls and enterprise infrastructure.
• Scripting skills in Python, PowerShell and/or Bash.
• Familiarity with security frameworks and practices such as MITRE ATT&CK, ISO 27001, NIST CSF, OWASP Top 10 or CIS Controls.
• Good communication skills in English and Chinese, including Putonghua.

Useful Additional Experience

• Palo Alto Cortex XDR/XSIAM, Splunk or Wazuh.
• Palo Alto or Fortinet firewalls.
• AWS/Azure security, CSPM or PAM solutions.
• SOAR, AI-assisted security investigation or security automation.
• Relevant cybersecurity certifications.

Candidates with less experience may be considered for a Cyber Security Engineer position.