Cybersecurity Specialist Job in Hong Kong focuses on protecting IT and OT systems through vulnerability assessments, security monitoring, risk management, DLP, SIEM, and incident response. The role requires a degree in a related field and at least 5 years of hands-on IT or OT cybersecurity experience. Candidates should have strong technical, analysis, reporting, and communication skills, with knowledge of security systems, networks, system hardening, and industrial control systems.
About the Job
Responsibilities:
- Conduct regular vulnerability scanning, assessments, and security reviews across IT and OT systems.
- Identify, validate, prioritize, and track vulnerabilities. Provide practical recommendations for remediation or risk mitigation.
- Design, implement, and maintain security controls for IT and OT systems and their related assets.
- Support the implementation and ongoing operation of vulnerability management, DLP, SIEM, and other security solutions.
- Manage and tune DLP policies and recommend measures to protect sensitive information.
- Integrate relevant IT and OT log sources into the SIEM. Develop monitoring rules, alerts, dashboards, and reports.
- Monitor and analyze security events. Support security incident investigation, response, and remediation.
- Conduct security assessments and technical reviews for new systems, projects, and major system changes.
- Develop and maintain system hardening guidelines, operating procedures, and technical documentation.
- Conduct regular security reviews to ensure that IT and OT systems comply with relevant policies, standards, and regulatory requirements.
- Collaborate with IT, OT, engineering, project teams, system owners, and vendors to integrate security controls into systems and operations.
- Prepare security metrics and management reports covering vulnerabilities, DLP events, security alerts, and remediation progress.
- Keep up to date with the latest cybersecurity threats, vulnerabilities, technologies, and industry practices.
Qualifications:
- Degree holder or above in Computer Science, Information Technology, Cybersecurity, Engineering, or related disciplines.
- Minimum of 5 years of hands-on technical experience in IT or OT cybersecurity roles.
Required Skills:
- Solid experience in vulnerability scanning, assessment, prioritization, and remediation tracking is a must.
- Hands-on experience with SIEM, security monitoring, log analysis, and security event investigation.
- Experience with DLP solutions, policy configuration, and alert investigation is an advantage.
- Solid knowledge of Windows Server, Linux, virtualization, network administration, and security monitoring.
- Good understanding of firewalls, network segmentation, secure remote access, endpoint security, and system hardening.
- Knowledge of OT or Industrial Control System environments, such as SCADA, PLC, and industrial networks, is an advantage.
- Knowledge of industrial protocols, such as Modbus, DNP3, PROFINET, and OPC, is an advantage.
- Good command of spoken and written English.
- Proficiency in spoken and written Chinese, including Putonghua and Simplified Chinese, is an advantage.
Please note that only shortlisted candidates will be notified. All information gathered will be treated in strict confidence and used solely for recruitment purposes.
