Skills

Must have

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related disciplines.
Strong communication skills in English and Chinese.
Minimum 5 years of hands-on experience in Security Operations, Incident Response, Threat Hunting, Detection Engineering, Blue Team Operations, or Cyber Defence.
Strong technical background in enterprise security environments, preferably within Banking, Financial Services, Large Enterprises, MSSPs or Cyber Security Consultancies.
Hands-on experience with SIEM platforms (Splunk, QRadar, Sentinel, ELK), EDR solutions, SOAR platforms and Threat Intelligence tools.
Strong knowledge of Windows, Linux, Active Directory, Networking, Cloud Security (Azure/AWS/GCP), MITRE ATT&CK Framework and Cyber Kill Chain.
Experience in incident investigation, malware analysis, threat hunting and detection rule development.
Familiarity with scripting or automation using Python, PowerShell or SQL is highly preferred.

Salary: open

Lead and enhance the Bank's Security Operations and Cyber Defence capabilities.

Drive threat detection, threat hunting, incident response and cyber defence initiatives across on-premise and cloud environments.
Tune and optimize SIEM, EDR, SOAR and security monitoring platforms to improve detection coverage and response effectiveness.
Investigate security incidents, conduct root cause analysis, and coordinate containment, eradication and recovery activities.
Develop and implement detection use cases, correlation rules, threat intelligence and cyber-hunting methodologies.
Partner with Red Team, Threat Intelligence, Infrastructure and Application Security teams to improve the Bank's overall security posture.
Conduct security assessments and identify gaps in monitoring, logging and detection controls.
Support cyber exercises, attack simulations and incident response preparedness activities.
Research emerging threats, TTPs and attack vectors, and translate findings into actionable detection and defence measures.
Provide technical leadership and mentorship to junior security analysts and engineers.

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related disciplines.
Strong communication skills in English and Chinese.
Minimum 5 years of hands-on experience in Security Operations, Incident Response, Threat Hunting, Detection Engineering, Blue Team Operations, or Cyber Defence.
Strong technical background in enterprise security environments, preferably within Banking, Financial Services, Large Enterprises, MSSPs or Cyber Security Consultancies.
Hands-on experience with SIEM platforms (Splunk, QRadar, Sentinel, ELK), EDR solutions, SOAR platforms and Threat Intelligence tools.
Strong knowledge of Windows, Linux, Active Directory, Networking, Cloud Security (Azure/AWS/GCP), MITRE ATT&CK Framework and Cyber Kill Chain.
Experience in incident investigation, malware analysis, threat hunting and detection rule development.
Familiarity with scripting or automation using Python, PowerShell or SQL is highly preferred.

If you're interested in this role, click 'apply now' to submit your CV.

Cybersecurity Manager/ Blue Team Lead | Large Scale Bank

Compensation

Not disclosed

Location

Central and Western District

Work setup

Onsite

Seniority

Lead

Employment

Not specified

Experience

5+ years

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related disciplines.
Strong communication skills in English and Chinese.
Minimum 5 years of hands-on experience in Security Operations, Incident Response, Threat Hunting, Detection Engineering, Blue Team Operations, or Cyber Defence.
Strong technical background in enterprise security environments, preferably within Banking, Financial Services, Large Enterprises, MSSPs or Cyber Security Consultancies.
Hands-on experience with SIEM platforms (Splunk, QRadar, Sentinel, ELK), EDR solutions, SOAR platforms and Threat Intelligence tools.
Strong knowledge of Windows, Linux, Active Directory, Networking, Cloud Security (Azure/AWS/GCP), MITRE ATT&CK Framework and Cyber Kill Chain.
Experience in incident investigation, malware analysis, threat hunting and detection rule development.
Familiarity with scripting or automation using Python, PowerShell or SQL is highly preferred.

Salary: open

Lead and enhance the Bank's Security Operations and Cyber Defence capabilities.

Drive threat detection, threat hunting, incident response and cyber defence initiatives across on-premise and cloud environments.
Tune and optimize SIEM, EDR, SOAR and security monitoring platforms to improve detection coverage and response effectiveness.
Investigate security incidents, conduct root cause analysis, and coordinate containment, eradication and recovery activities.
Develop and implement detection use cases, correlation rules, threat intelligence and cyber-hunting methodologies.
Partner with Red Team, Threat Intelligence, Infrastructure and Application Security teams to improve the Bank's overall security posture.
Conduct security assessments and identify gaps in monitoring, logging and detection controls.
Support cyber exercises, attack simulations and incident response preparedness activities.
Research emerging threats, TTPs and attack vectors, and translate findings into actionable detection and defence measures.
Provide technical leadership and mentorship to junior security analysts and engineers.

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related disciplines.
Strong communication skills in English and Chinese.
Minimum 5 years of hands-on experience in Security Operations, Incident Response, Threat Hunting, Detection Engineering, Blue Team Operations, or Cyber Defence.
Strong technical background in enterprise security environments, preferably within Banking, Financial Services, Large Enterprises, MSSPs or Cyber Security Consultancies.
Hands-on experience with SIEM platforms (Splunk, QRadar, Sentinel, ELK), EDR solutions, SOAR platforms and Threat Intelligence tools.
Strong knowledge of Windows, Linux, Active Directory, Networking, Cloud Security (Azure/AWS/GCP), MITRE ATT&CK Framework and Cyber Kill Chain.
Experience in incident investigation, malware analysis, threat hunting and detection rule development.
Familiarity with scripting or automation using Python, PowerShell or SQL is highly preferred.

If you're interested in this role, click 'apply now' to submit your CV.