IT Security Engineer

Looking to join a dynamic, prestigious and reputable property agency in Hong Kong?

We are searching for driven and talented individuals like you to be part of our energy-packed team. We offer competitive salaries, comprehensive benefits, and unparalleled opportunities for career growth and development.

Join us in shaping the future of property in Hong Kong, where we set new standards of excellence in the industry. We are looking for those who are hardworking, driven, and passionate about innovation in real estate to be part of our team. If you're ready to propel your career to the next level, apply now, and become part of our dynamic and growing team!

Responsibilities:

• Own and continuously strengthen security controls across in-house IT operations and outsourced services, in line with company policies and industry standards
• Champion secure SDLC and secure coding practices for in-house developed applications
• Lead regular vulnerability assessments and penetration tests across IT systems and network infrastructure, and drive timely patching of critical vulnerabilities
• Define and own the Computer Security Incident Response process — including escalation channels, diagnosis, and coordinating remediation with internal and external stakeholders
• Build and maintain dashboards and metrics on cyber threats and vulnerabilities for management reporting
• Govern the secure adoption of AI across the organisation, including LLMs and AI agents
• Act as the go-to security advisor for teams across the business
• Stay ahead of emerging cyber-attack threats and evolving mitigation techniques

Requirements:

• Degree in Information Security, Computer Science, IT, or a related field
• 3–5 years' hands-on experience in information security — incident response, security operations, or computer forensics
• Solid knowledge of TCP/IP networking and security products (firewalls, IDPS, web proxies)
• Proficiency with Windows and Linux/UNIX environments
• Working knowledge of core security technologies: AAA, email/web security, PKI, encryption, endpoint protection
• Strong understanding of attack techniques (APT, DDoS, malware, phishing) and corresponding investigation and response methodologies

Nice to Have

• Security certifications such as CISSP, OSCP, GIAC, CEH, CISM, or CISA
• Experience with security frameworks and standards: ISO 27001, C-RAF, COBIT, CIS Critical Controls
• Background in security vendors or law enforcement
• Exposure to AI security governance — e.g. OWASP Top 10 for LLMs, Agent 365, Power Platform, or similar AI risk frameworks
• Experience in IT/security project management, product evaluation, and vendor management

Interest parties please send your updated CV with current and expected salary by clicking “APPLY NOW” or go to our Company website at http://midland.com.hk. [link removed] We are an Equal Opportunity Employer. All personal data will be collected for recruitment purpose only and treated strictly confidential.