Vulnerability Management: Run regular security scans, identify and prioritize vulnerabilities, and recommend actionable fixes for IT and OT systems.
System Protection & Hardening: Design, set up, and maintain security controls, as well as build technical guidelines and documentation.
SIEM & Monitoring: Connect system log sources to the SIEM platform, build custom alerts and dashboards, and analyze security events.
Data Loss Prevention (DLP): Manage and tune DLP policies to keep sensitive data secure.
Incident Response: Investigate, respond to, and resolve security threats and incidents.
System & Compliance Reviews: Conduct security reviews for new projects or system changes to ensure compliance with standards and regulations.
Team Collaboration: Partner with engineering teams, system owners, and vendors to integrate security into daily operations.
Reporting & Trends: Track security metrics (e.g., vulnerabilities, incident trends) for management and stay up to date on new cyber threats.
Job Requirements
Education: Degree in Computer Science, IT, Cybersecurity, Engineering, or a related field.
Experience: At least 5 years of hands-on experience in IT/OT cybersecurity.
Core Technical Skills:
Strong background in vulnerability scanning, SIEM monitoring, log analysis, and incident investigation.
solid understanding of Windows, Linux, networking, firewalls, network segmentation, and endpoint security.
Experience with DLP configuration and monitoring.
OT / Industrial Knowledge (Bonus): Familiarity with industrial control systems (SCADA, PLC) or protocols (Modbus, DNP3, PROFINET, OPC) is a plus.
Certifications (Bonus): CISSP, CISM, GICSP, Security+, or similar certifications are advantageous.
Soft Skills: Problem-solving mindset, self-motivated, good project coordination skills, and comfortable managing vendors.
Languages: Fluency in English (written and spoken). Knowledge of Chinese (Cantonese/Putonghua) is an advantage.
