IT Security Analyst, Investment Bank

Position Description

We are looking for an IT Security Analyst based out of Hong Kong, to be part of an international IT Security team to engineer and support security solutions 

As a team member in IT security team, you will be a contributor to the company’s IT and Cyber security strategy and operations. You will be assisting to manage a portfolio of IT security tools including Cloud Security (Microsoft Defender /Azure / AWS), LAN and Wi-Fi Network Access Control (NAC), VPN Security, MFA, WAF and Anti-DDOS, Network IDS, Data Leakage Protection, Application security, and other information security controls.

To be successful in this role you should have a passion for IT Security and technology in general.

Key Areas of Responsibilities

• Provide first level (L1) support for the team’s existing security controls and tools, with primary focus on IT Security engineering.
• Audits, risk assessments of infrastructure, systems, and applications. Implement risk remediation and enhancements in security to meet security requirements.
• Form an effective working relationship with the team’s key stakeholders - IT Security team members, IT teams and business teams.
• Be the subject matter expert of Networks and perimeter controls including proxies, web application firewalls, Anti-DDOS protection
• Responsible for security support, escalation, incident management, problem management, inventory management, technical documentation, knowledgebase updates, security monitoring, BCP tests, etc.
• Collaborate with multiple teams to ensure security controls are put in place during design, implementation and operation.
• Deliver new strategic secure technology solutions with collaboration from business partners.

Requirements

• Degree in Information Technology or related
• Hands-on experience in a technical information security role
• Basic understanding of security principles and technologies
• Up-to-date understanding of the latest threats, vulnerabilities, mitigation and industry best practices
• SIEM/SIM skills
• Fundamental Knowledge of cyber attack analysis
• Experience in scripting and process automation
• Experience in vulnerability assessment and penetration testing is a plus
• Windows, Networking and Database fundamentals
• Hands-on experience/knowledge in security configurations in tools such as Microsoft Defender for Email /
• Endpoint / Identify / Cloud Apps, DLP, proxy and other endpoint protection solutions, Cisco ISE, RSA, Azure SIEM, Key Vault is a plus
• Project coordination skills, good communication skills, and creative problem-solving skills.
• Have confidence working in a regulated industry.