Total 3 quality control engineer job vacancies in Legal / Public / Security category in Hong Kong

Key Responsibilities

1. Administer, configure, and maintain network security technologies, including firewalls, VPNs, intrusion detection/prevention systems (IDS/IPS), and network access control solutions.
2. Monitor network security events and investigate security alerts, incidents, and potential threats.
3. Implement and maintain firewall policies, network segmentation, access controls, and secure connectivity solutions.
4. Troubleshoot and resolve network security issues while ensuring minimal disruption to business operations.
5. Conduct security reviews, vulnerability assessments, and configuration audits of network infrastructure.
6. Support the design and implementation of secure network architectures and infrastructure solutions.
7. Create and manage security architecture and design artefacts that embed security principles into enterprise systems and ensure alignment with organizational architecture standards and business objectives.
8. Develop and maintain network security documentation, diagrams, standards, procedures, and operational guides.
9. Collaborate with infrastructure, application, and enterprise architecture teams to ensure security requirements are incorporated into projects and operational activities.
10. Support security incident response, root cause analysis, and remediation activities.
11. Assist with compliance, audit, and risk management initiatives by providing technical expertise and evidence of security controls.
12. Stay current with emerging cybersecurity threats, technologies, and industry best practices.

Required Skills and Experience

1. Strong understanding of networking concepts, including TCP/IP, routing, switching, DNS, DHCP, VPNs, and network segmentation.
2. Hands-on experience managing enterprise firewalls and security technologies.
3. Knowledge of network security principles, security monitoring, threat detection, and incident response.
4. Experience with vulnerability management and security hardening practices.
5. Ability to interpret security requirements and implement appropriate technical controls.
6. Strong analytical, troubleshooting, and problem-solving skills.
7. Excellent documentation and communication skills.

Qualifications

1. Bachelor’s degree in information technology, Computer Science, or a related field.
2. Minimum 7 Years of experience in network security, cybersecurity, or ICT infrastructure security roles.
3. Should have experience in Azure Cloud environment  

Required Certifications

1. CCNA or CCNP
2. PCNSA
3. AWS/Azure Certified

Job Tasks and Responsibilities

• Conduct cloud security assessments, architecture reviews and risk assessments for GCC and public sector cloud environments on AWS and Azure
• Design, implement and maintain secure cloud architecture, landing zones, guardrails and baseline configurations across AWS and Azure platforms
• Harden cloud infrastructure, services, virtual machines, containers and platform components based on approved security standards and benchmarks
• Develop scripts and Infrastructure as Code to automate cloud security hardening, monitoring, compliance checks and remediation activities
• Implement and manage cloud identity and access management controls including least privilege, federation, privileged access, secrets and key management
• Configure and maintain cloud security controls such as network segmentation, firewalls, WAF, DDoS protection, private connectivity and encryption
• Maintain cloud security monitoring, logging and alerting capabilities, and support threat detection, investigation and incident response activities
• Work with Cloud, DevOps and Application teams to integrate security controls into CI/CD pipelines and secure software delivery processes
• Perform vulnerability assessments, configuration reviews and remediation tracking for workloads deployed on AWS and Azure
• Conduct reviews to ensure compliance with security policies, public sector requirements, data residency controls and cloud governance standards
• Work with Engineering and Operations teams to manage cloud security findings and drive closure through the defect life cycle
• Improve cloud security processes, standards, playbooks and tools to enhance security posture and operational efficiency
• Take on a secondary role as a DevSecOps Engineer or Cloud Platform Security Engineer where required by project needs
• Collaborate with cross-functional teams to enhance security across the cloud development and operations pipeline

EXPERIENCE AND SKILLS NEEDED

• Min 4 years of experience in cloud security engineering, cloud security assessment, analysis and remediation
• Experience in AWS and Azure, including GCC and public sector / regulated cloud environments, will be an added advantage
• Experience in secure cloud architecture design, landing zones, account/subscription segregation and cloud governance will be an added advantage
• Experience in agile development environment will be an added advantage
• Experience with continuous integration and continuous delivery using GitLab, Azure DevOps, GitHub Actions, Jenkins or other similar tools will be an added advantage
• Experience with Infrastructure as Code tools such as Terraform, CloudFormation, Bicep, ARM templates or equivalent will be an added advantage
• Experience with AWS security services such as IAM, Organizations, Control Tower, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, WAF or equivalent will be an added advantage
• Experience with Azure security services such as Microsoft Entra ID, Azure Policy, Key Vault, Defender for Cloud, Microsoft Sentinel, Azure Monitor, Azure Firewall or equivalent will be an added advantage
• Experience with cloud security posture management (CSPM), cloud workload protection (CWPP), CNAPP tools such as Wiz, Prisma Cloud, Defender for Cloud, Lacework, Orca or equivalent will be an added advantage
• Experience with container and Kubernetes security for AKS, EKS, image scanning, runtime protection and secrets management will be an added advantage
• Experience with IAM, PAM, zero trust, encryption, PKI, SIEM/SOAR, incident response and cloud logging will be an added advantage
• Experience with vulnerability management and cloud-native security testing tools, including SAST, DAST, SCA, secrets scanning or equivalent will be an added advantage
• Experience with compliance and governance standards such as CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI DSS and applicable GCC / public sector regulatory requirements will be an added advantage
• Certified cloud and security professionals such as AWS Certified Security – Specialty, AWS Solutions Architect, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Azure Solutions Architect, CCSP, CCSK, CISSP, CISM or equivalent will be an added advantage
• Security testing-specific certifications such as CEH, OSCP, GPEN, GWAPT or equivalent will be an added advantage.
• Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology or related disciplines.

Responsibilities:

Endpoint Protection

·      Administer, operate, and maintain Symantec Endpoint Protection Manager or Defender or any other end point security solution.

·      Deploy, configure, and manage endpoint protection policies, including anti-malware, IPS, firewall, and device control

·      Generate security posture reports regularly to identify gaps in protection and manage the end-to-end lifecycle of the Symantec agent.

·      Perform upgrades and roll outs during weekend maintenance window

User Support & Operations

·      Provide Level 2 / Level 3support for incidents and service requests

·      Monitor endpoint security alerts, investigate incidents, and perform root cause analysis

IT Service Management

·      Understands ITIL processes for Incident, Problem, Change Management

·      Create and update tickets with detailed documentation and resolution steps

·      Maintain SLAs and ensure timely ticket resolution

Documentation & Knowledge Management

·      Create and maintain technical documentation, knowledge articles, and standard operating procedures (SOPs)

·      Maintain runbooks for common operational tasks

Required skills and qualifications:

·      Singaporeans By Birth Only(Public Sector Client)

·      A degree in Computer Science, Information Technology, IT Security or a related field with at least 2-4 yearsof work experience

·      At least 1 year of experience with SEPM / Defender

·      Experience with Host Intrusion Prevention & Detection (HIPS / HIDS)

·      Experience with Windows and/or Linux (RedHat) system administration

·      Able to prioritize multiple tasks in a dynamic working environment, with strong communication and interpersonal skills

Preferred skills and qualifications:

·      Knowledge of Microsoft Defender is a bonus

·      Experience with scripting programming languages (e.g. PowerShell, Python) for automation.