Total 19 payroll analyst job vacancies in Legal / Public / Security category in Hong Kong

    Job Description

·      We are seeking a skilled and proactive Cyber Security Analyst to join our Security Operations Center (SOC). The ideal candidate will be responsible for real-time security monitoring, incident investigation, and response across enterprise environments.

·       This role requires strong expertise in threat detection, incident handling, and continuous improvement of SOC capabilities. 

Key Responsibilities 

·      Security Monitoring & Incident Response Monitor, investigate, and respond to medium to high-severity security incidents across network, endpoint, cloud, and application environments

·       Perform in-depth analysis of alerts, logs, and security telemetry to identify root cause, impact, and remediation actions

·       Coordinate incident response activities with internal teams and external stakeholders when required 

·      Escalate critical incidents to management as per defined protocols 

·      Ensure all incidents are handled in accordance with SLAs, playbooks, and compliance requirements 

·      Threat Detection & Use Case Management Tune and optimize SIEM detection rules to improve detection accuracy and reduce false positives

·       Analyze emerging threats and enhance detection use cases accordingly

·       Continuous Improvement & SOC Maturity Contribute to the development and enhancement of SOC processes, runbooks, and playbooks 

·      Identify opportunities for automation using SOAR and AI-driven solutions 

·      Support initiatives to improve SOC efficiency and maturity 

·      Leadership & Mentorship Provide guidance and mentoring to junior SOC analysts Act as an escalation point for complex investigations 

·      Promote knowledge sharing, training, and continuous learning within the team 

Required Skills & Experience 

·      Hands-on experience with SIEM platforms such as Splunk, Elasticsearch, Microsoft Sentinel, or Google SecOps Strong understanding of network, endpoint, identity, and cloud security concepts 

·      Experience analyzing logs from firewalls, EDR, IDS/IPS, cloud platforms, and operating systems 

·      Knowledge of incident response methodologies and digital forensics fundamentals 

·      Experience 3–5 years of experience in Cyber Security Operations, SOC, or Incident 

·      Response roles Proven ability to independently handle medium to high-severity incidents 

·      Experience working in regulated environments (financial services, healthcare, government) is an advantage 

·      Soft Skills Strong analytical and problem-solving abilities 

·      Ability to remain calm and structured under pressure High level of ownership, accountability, and attention to detail 

Preferred / Nice-to-Have 

·      Experience with SOAR platforms and security automation 

·      Cloud security expertise (AWS, Azure, GCP) Scripting/query skills (SPL, KQL, SQL, Python) 

·      Experience in SOC transformation or SIEM migration projects 

·      Certifications (Preferred) GCIA, GCIH, GCED SIEM-related certifications (Elastic, Google SecOps, Microsoft Sentinel, or equivalent)vv

​Our Client is an established and leading company in Singapore, who is seeking to recruit a Cyber Security Analyst.

KEY ROLES AND RESPONSIBILITIES

• Drive continuous improvement of Incident Response Framework, Incident Response Plan, Event Management, Standard Operation Procedure, Playbook and etc. for cybersecurity operations and incident response

• Perform advanced trend, pattern and statistical analysis to project future technical cyber threat scenarios

• Produce findings to help initialize or support law enforcement and counterintelligence investigations or activities

• Establish incident management procedures for the detection, reporting and handling of incidents

• Direct post-mortem activities following critical incidents

• Work closely with internal and external parties to manage the operation of SOC

• Manage security operation to ensure implemented security technologies and controls are effective and adequate to protect our infrastructure/business

• Track and analyse cybersecurity metrics for effectiveness, benchmarking and management reporting.

QUALIFICATIONS & EXPERIENCE

• 6 or more years of experience in running security operations including management of Security Operation Center (SOC).

• Technical know-how and experience in IT security solutions such as (but not limited to) and at least operated in more than one of the followings:-

• Network Security : F/W, IPS, VPN, UTM, NAC

• Knowledge in Checkpoint, Juniper, Cisco, Aruba and Fortigate, CyberArk, Tripwire, will be an added advantage

• Content Security : WEB Security, Anti-Spam/Anti-Virus

• End point Security : Anti-Virus/Malware, Host base IPS, DLP, BitLocker

• Security Information Management: SIEM, Security management, Forensics

• Experience in conducting detailed cyber security events investigation and analysis including leading and responding to cyber security incidents

• Relevant Cybersecurity Certifications such as CISM, CISSP, GCIH, GNFA, CCSK, CRIST will be an added advantage

JJ Consulting Services

EA Licence No.: 12C6207

Applicants are invited to send in a MS Word resume to jobs@jjconsulting.com.sg stating position applying for/present/expected salaries and earliest available date.

We thank all applicants in advance and regret that only short listed candidates will be notified.

​Our Client is an established and leading company in Singapore, who is seeking to recruit a Cyber Security Analyst.

KEY ROLES AND RESPONSIBILITIES

• Drive continuous improvement of Incident Response Framework, Incident Response Plan, Event Management, Standard Operation Procedure, Playbook and etc. for cybersecurity operations and incident response

• Perform advanced trend, pattern and statistical analysis to project future technical cyber threat scenarios

• Produce findings to help initialize or support law enforcement and counterintelligence investigations or activities

• Establish incident management procedures for the detection, reporting and handling of incidents

• Direct post-mortem activities following critical incidents

• Work closely with internal and external parties to manage the operation of SOC

• Manage security operation to ensure implemented security technologies and controls are effective and adequate to protect our infrastructure/business

• Track and analyse cybersecurity metrics for effectiveness, benchmarking and management reporting.

QUALIFICATIONS & EXPERIENCE

• 6 or more years of experience in running security operations including management of Security Operation Center (SOC).

• Technical know-how and experience in IT security solutions such as (but not limited to) and at least operated in more than one of the followings:-

• Network Security : F/W, IPS, VPN, UTM, NAC

• Knowledge in Checkpoint, Juniper, Cisco, Aruba and Fortigate, CyberArk, Tripwire, will be an added advantage

• Content Security : WEB Security, Anti-Spam/Anti-Virus

• End point Security : Anti-Virus/Malware, Host base IPS, DLP, BitLocker

• Security Information Management: SIEM, Security management, Forensics

• Experience in conducting detailed cyber security events investigation and analysis including leading and responding to cyber security incidents

• Relevant Cybersecurity Certifications such as CISM, CISSP, GCIH, GNFA, CCSK, CRIST will be an added advantage

JJ Consulting Services

EA Licence No.: 12C6207

Applicants are invited to send in a MS Word resume to jobs@jjconsulting.com.sg stating position applying for/present/expected salaries and earliest available date.

We thank all applicants in advance and regret that only short listed candidates will be notified.

Summary:
The successful candidate will support tasks within the data Protection Portfolio, such as provision of computing resources, installing and configuring security software, managing network/firewall requests, account provisioning, backend integrations (SSO, SIEM, SOAR, MyAccess, DataDog), and creation of support documentation for operationalization.

• Possess a degree in Computer Science/Information Technology or related fields.
• Possess a strong combination of technical and analytical skills incybersecurity, including expertise in data loss prevention, data securityposture management, enterprise digital rights management, and general datasecurity technologies.
• Hands-on experience in implementing and operationalizing data securitysolutions and data protection, for both structured and unstructured data,specifically:
• Data discovery, classification, and labelling
• Data encryption, masking, tokenization
• Data Loss Prevention (DLP)
• Enterprise Digital Rights Management / Information Rights Management
• Privacy Enhancing Technologies and Confidential Computing
• Key and certificate management
• Hardware Security Modules (HSM)

Skillset(Must have)

• Secure file transfer and data store (including SaaS solutions)
• Familiarity with Cloud security and data security and protection in Cloud environments (e.g., AWS, Azure, Google Cloud).
• Possess scripting and coding skills, with proficiency in Java, Python, C#, orsimilar programming languages, and good understanding of REST API’s and JSON.
• Ability to create and maintain automation scripts.
• Familiarity with Cloud security and data security and protection in cloudenvironments (e.g., AWS, Azure, Google Cloud).
• Strong written and verbal communication skills, with the ability to conveytechnical information to non-technical stakeholders.
• Ability to work collaboratively with cross-functional teams and build strongworking relationships.
• Apply critical thinking skills to analyze complex security issues, evaluate potential solutions, and make well-informed decisions.