Cybersecurity Engineer(AVP/VP) & System Engineer(Asso/AVP)

FOR CYBERSECURITY ENGINEER

Key Responsibilities

• Oversee daily security management and protection of corporate network and information systems to maintain secure and stable operational status.

• Monitor and analyse security logs and events, identify potential cyber threats and attacks, and deliver timely incident response and disposal.

• Conduct regular vulnerability scanning, security assessment and penetration testing, discover system security risks, and drive continuous remediation and rectification.

• Participate in the formulation and optimisation of cybersecurity policies, standards and operational workflows, and improve the security incident response mechanism.

• Track evolving cyber threats, emerging vulnerabilities and advanced defensive technologies to continuously upgrade the company’s overall security posture.

• Support internal and external security audits, compliance inspections and security evaluation work.

• Complete other ad-hoc security tasks assigned by the team.

Job Requirements & Preferred Qualifications

• Minimum 5 years of cybersecurity and information security working experience, with solid knowledge of mainstream cyber attack methods and security defence technologies.

• Proficient in vulnerability scanning, security assessment, log analysis and security monitoring operations; familiar with Linux/Windows systems, network protocols, firewalls, IDS/IPS, WAF and other mainstream security devices.

• Possess strong analytical capabilities and problem-solving skills for security incident handling, with good communication skills and team spirit.

• Fluent in English, Cantonese and Mandarin to support effective communication in a multilingual working environment.

FOR SYSTEM ENGINEER

Key Responsibilities

• Handle daily infrastructure BAU operations and participate in infrastructure architecture design, planning and continuous optimisation; deploy, configure, upgrade and maintain Linux and Windows Server systems to guarantee stable and secure enterprise operation.

• Manage the installation, configuration, performance tuning and troubleshooting of mainstream middleware including WebLogic, Tomcat, Nginx, Apache and MQ message queues.

• Oversee infrastructure monitoring via centralized monitoring systems, track real-time production environment status, optimise monitoring thresholds and ensure consistent service stability.

• Conduct system resource analysis, execute capacity planning and dynamic resource allocation to improve overall infrastructure performance.

• Respond to IT incidents, service requests and system outages; design and implement disaster recovery solutions to mitigate business risks, and participate in 24/7 on-call rotation for emergency handling.

• Comply with and enforce infrastructure management policies, technical standards and security protocols to meet enterprise compliance requirements.

• Complete ad-hoc infrastructure tasks assigned by the management team.

Job Requirements & Preferred Qualifications

• Minimum 5 years of enterprise system administration experience, including at least 3 years of hands-on experience in OS and middleware management.

• Proficient in deployment and configuration of Linux & Windows Server environments, as well as mainstream middleware and MQ platforms.

• Hands-on experience with monitoring tools (Solarwind, Zabbix) and centralized log management; familiar with virtualization, cloud platforms and container technologies (Docker, Kubernetes).

• Skilled in Shell/Python scripting and Ansible automation for infrastructure management and CI/CD pipeline implementation.

• Solid knowledge of networking fundamentals (TCP/IP, DNS, Firewall, Load Balancer) and security best practices (SSL/TLS, IAM).

• Willing to join 24/7 on-call rotation and respond to infrastructure emergencies.

• Fluent in English, Cantonese and Mandarin for multilingual workplace communication; strong teamwork and cross-department collaboration skills.