Job Description

• Assist in the implementation and maintenance of IT security-related systems, such as Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR) and vulnerability management system
• Perform proof-of-concept evaluation of IT security products in cyber security laboratory 
• Assist in developing and maintaining cyber threat intelligence programme 
• Use threat intelligence to monitor relevant cyber threats, and enhance its cyber risk management and control 
• Perform vulnerability assessment and penetration test, interpret findings and turn them into recommendations 
• Perform security risk analysis and make technical recommendations in accordance with the HKMA IT security policy, standards and guidelines, and with reference to industry best practices 
• Assist in developing and maintaining the HKMA IT security policy, standards and guidelines 
• Keep abreast of cyber security threat and security-related technologies, practices and regulations in the market, or from the government or other regulators 

• University degree in information security, cyber security or related fields 
• At least 2 years of experience in information security services 
• Work experience in SIEM and EDR an advantage 
• Good understanding of threat landscape and trends, and act proactively on threat intelligence 
• Good understanding of fundamental infrastructure components, network concepts, operating systems (Windows & Linux), intrusion, email systems, DNS, TCP/IP, etc. 
• In possession of the certification of CISSP / CISA preferred 
• Good analytical, interpersonal and communication skills