Overview
IT Security Engineer Jobs in Hong Kong, Hong Kong SAR at Kum Shing Group
Title: IT Security Engineer
Company: Kum Shing Group
Location: Hong Kong, Hong Kong SAR
The IT Security Engineer is responsible for designing, implementing, and maintaining the organization’s security infrastructure to protect data, systems, and networks from cyber threats. This role covers a wide range of responsibilities, including vulnerability management, network security, incident response, system hardening, and supporting secure IT operations across on-premise and cloud environments.
Responsibilities:
- Design, configure, and maintain security solutions such as firewalls, intrusion detection/prevention systems (IDS/IPS), VPNs, endpoint protection, SIEM, and DLP systems
- Monitor and analyze network traffic and system logs to detect, investigate, and respond to potential security incidents
- Conduct vulnerability assessments, penetration tests, and implement remediation plans to strengthen overall security posture in corporate or client projects
- Support information security audits, risk assessments, and compliance reviews by preparing documentation, evidence, and recommendations for remediation
- Design, implement, and maintain security controls for both corporate and client infrastructures, including AI compute environments, cloud infrastructure (Azure, Linode), and on-premises networks
- Assist in the development and enforcement of security standards and baselines (e.g., hardening for Windows, Linux, and network devices)
- Collaborate with Business Application teams to ensure secure infrastructure setup in all new implementations and system integrations
- Provide cybersecurity support for remote sites and construction site network deployments, ensuring secure connectivity and communication
- Stay up to date with the latest cybersecurity threats, technologies, and regulatory requirements; propose proactive improvements
- Prepare documentation, audit reports, and compliance materials when as required
Requirements:
- High Diploma or above in Information Security, Computer Science, or related disciplines
- 3–5 years of relevant work experience in IT security, network administration, or system engineering
- Detail-oriented, self-motivated, and able to work independently with minimal supervision
- Solid understanding of network protocols, firewalls, VPNs, IDS/IPS, and endpoint protection technologies
- Proficiency with open-source and commercial security and monitoring tools such as Wazuh, ELK Stack, Zabbix, Metasploit, OpenVAS, Burp Suite, Nessus or Nikto
- Hands-on experience in both Windows and Linux (Ubuntu) environments, including system hardening and security configuration
- Familiarity with Corporate Network, SAN, Opensource Systems and Virtualization Technologies (e.g. Proxmox, VMWare)
- Knowledge of cybersecurity frameworks (e.g. ISO 27001, CIS Controls) and compliance requirements
- Strong analytical mindset with problem-solving and incident response skills
- Relevant certifications such as CISSP, CEH, OSCP, GPEN are highly preferred.
- Good command of English and Chinese, fluency in Cantonese and Putonghua
- Able to liaise effectively with internal teams and suppliers from mainland China
We are keen to offer the right talent a competitive package, a caring work environment and continuous development opportunities. While many colleagues have been with us for more than 10, 20 or even 30 years, we look forward to more competent and dedicated talent joining the Kumshing family.
Please submit your application with a detailed resume, but EXCLUDE sensitive personal information. As an equal-opportunity employer, our recruitment and selection are based on knowledge, skills and experience, with an emphasis on commitment to work and integrity. Candidates will be required to provide supporting documents at a later stage and may need to undergo a competence test for certain positions. Any personal data collected during the recruitment process will be treated in strict confidence, used for recruitment purposes only, and handled in compliance with relevant regulations and corporate policies.
