Security Engineer

KEY AREAS OF RESPONSIBILITY 

Infrastructure Security and Cyber Security:

• Administer the school’s firewall working closely with other IT team members.
• Manage the implementation of a Security Incident and Event Management (SIEM) system and security projects by working closely with other IT team members.
• Build and administer the business continuity infrastructure.
• Work together with other IT Infrastructure team members in implementing a secure IT Infrastructure.
• Lead the investigation and incident response.
• Implement, maintain and operate information security solutions according to IT security strategy.
• Support asset deployments, upgrades, and maintenance, including servers, databases, network assets, and wireless intrusion detection LAN security.
• Analyze the cost and benefits of security technology and help in forecasting the direction of any future security infrastructure refreshes.
• Effectively manage the allocated budget for schoolwide security infrastructure.

Monitoring and Vulnerability Assessment:

• Perform daily security operation tasks, such as reviewing security events and logs, diagnosing and responding to security incidents, investigating phishing emails and websites.
• Perform application and infrastructure penetration tests and vulnerability scans using industry-standard tools.
• Perform information security and cyber security risk assessment based on common security tools, standards, and frameworks.
• Assist in functional/user acceptance tests of Application Systems
• Implement, monitor, and upgrade computer anti-virus and protection systems
• Perform risk assessments and tests on running data processing activities and security measures.
• Review and perform quality checks on deliverables from the vendor.
• Conduct security assessments and evaluations on third-party vendors/suppliers.
• Ensure timely patch management and continuous monitoring of the security infrastructure.

Documentation and Policies :

• Assist IT management in maintaining cyber security policies, guidelines, and relevant cyber security standards and procedures.
• Develop and manage a security awareness program for the school.
• Conduct research pertaining to the latest ransomware, malware, viruses, worms, etc., and the latest technological advances in combating unauthorized access to information.
• Prepare detailed reports and metrics on the effectiveness of the security measures and awareness program.

Security Awareness Training:

• Conduct regular security training sessions for staff and students.
• Promote a culture of security awareness throughout the school.
• Mentor and develop a student-run security practice, providing guidance and supervision.

Liaise with local suppliers /purchasing office personnel:

• Actively track down local (HK), regional (China, Singapore, Philippines, Thailand, Japan, Taiwan, Korea, Malaysia) and over-seas sources for materials.

Other Duties As Required:

• Take an active role in your development and work towards gaining industry-recognized certifications in the core products used by HKIS, in addition to developing other technical and interpersonal skills.
• Work with student leadership to provide security awareness training to students as well as develop security programs with the students.
• Undertake any other duties and responsibilities as required, which will help impact and strengthen the contributions of the division and improve overall operations.

EXPERIENCE AND QUALIFICATIONS 

Education:

• University graduate with a degree in Information Security, Computer Science, or other related disciplines preferred.
• Holder of security certificates such as SANS/GIAC, CEH, CISSP, CISM, or CISA.

Experience:

• Minimum 4 years working experience with at least three years in IT security preferred.
• Proven experience with operating systems (Windows, Unix, Linux, and Macintosh), backups, virtualization technologies.
• Hands-on experience with vulnerability assessments and penetration methodologies.
• Familiar with advanced routing, switching, remote access, multilayer switching, CISCO IOS security, VPN security, and troubleshooting.

Technical Skills:

• Proficiency in security technologies such as firewalls, IDS/IPS, web proxy, EDR/XDR, IAM, Sandbox, and SIEM.
• Strong understanding of cybersecurity frameworks (e.g., MITRE ATT&CK, OWASP, NIST).
• Hands-on experience integrating and managing these tools within an organizational security strategy.

Personal Skills/Qualities:

• Solid English communication skills, verbal and written. Cantonese and Mandarin are also an advantage.
• Excellent customer service skills and an ability to work as a flexible, collaborative, and supporting team member while excelling in a fast-paced service environment.
• Have a strong sense of responsibility and an eagerness to learn
• Ability to work with people of various backgrounds with all levels of technical knowledge
• Ability to work well individually and in a team
• Willing to work with and support our students and learning community
• Willing to work outside office hours when required, especially during busy periods
• Ability to handle confidential files and information in a professional manner
• Intellectual flexibility, technical curiosity, and a sense of humor, including the ability to learn independently.

Interested candidates please forward your updated resume together with a cover letter and references to [via Apply Now]

We invite you to learn more about our school and discover for yourself career opportunities in our remarkable HKIS community at www.hkis.edu.hk

We look forward to hearing from you!

We are an equal opportunity employer and welcome applications from all qualified candidates. Information provided will be treated in strict confidence and used only for recruitment purposes.

All applications applied through our system will be delivered directly to the advertiser and privacy of personal data of the applicant will be ensured with security.