Cyber Security Engineer

Security Engineer responsible for cybersecurity operations, incident response, security monitoring, vulnerability management, and risk mitigation within a complex enterprise environment.

Job Duties:

• Design, implement, and maintain cybersecurity infrastructure to protect networks, systems, applications, and organizational data.
• Manage and optimize security solutions including SIEM, firewalls, EDR/XDR, IDS/IPS, IAM, VPN, and endpoint protection platforms.
• Monitor security events, investigate threats, and lead incident response activities to ensure timely remediation.
• Conduct vulnerability assessments, penetration testing, and security reviews across IT infrastructure and applications.
• Drive security enhancement initiatives through patch management, system hardening, and continuous risk monitoring.
• Develop and maintain business continuity, disaster recovery, and cybersecurity governance frameworks.
• Assess third-party vendor security controls and identify potential risks associated with external services and technologies.
• Deliver security awareness training and promote cybersecurity best practices across the organization.
• Generate security reports, risk assessments, and operational metrics to support management decision-making.
• Collaborate closely with infrastructure and application teams to strengthen the overall security posture.

Requirements:

• Degree holder in Information Security, Computer Science, Information Technology, or a related discipline.
• Minimum 4 years of IT experience, including at least 3 years in cybersecurity, information security, or security operations.
• Professional certifications such as CISSP, CISM, CISA, CEH, GIAC, or equivalent are highly preferred.
• Hands-on experience with SIEM, Firewall, EDR/XDR, IDS/IPS, IAM, VPN, and endpoint security technologies.
• Strong knowledge of cybersecurity frameworks and standards such as NIST, OWASP, and MITRE ATT&CK.
• Experience in vulnerability management, penetration testing, risk assessment, and incident response.
• Familiarity with Windows, Linux, virtualization platforms, networking technologies, and backup solutions.
• Strong analytical mindset with excellent troubleshooting and problem-solving skills.
• Effective communication and stakeholder management skills in English; Chinese language skills are advantageous.
• Self-motivated, proactive, and able to work independently within a fast-paced environment.