Sr Cybersecurity Specialist - CAT3 - SIEM, CISSP/CISP (C34941)

Project Nature:

• System Maintenance and Support of Centrally Managed Messaging Platform (CMMP) - CMMP is a new platform built by DPO to replace the Government's current decentralized email system in order to enhance the ability in tackling the increasing cyber security risks, utilize computing resources optimally and increase operational efficiency of the Government.

Duties:

• Serve a contract assignment under InfoTech's headcount, full-time second to serve the Department;

• Take part in analysis and design, implementation, and testing on system changes/enhancements of Security Information and Event Management (SIEM) including Elastic Search;

• Design and implement to ingest, parse and transform logs from various system sources to support SIEM functionality and security event analysis for creation and fine tune of SIEM detection rules with threat Intelligence deployment;

• Perform on-going maintenance and support for SIEM solutions;

• Manage the physical appliances and equipment located in data centres;

• Follow up the reported issues for the server infrastructure and the other infrastructure components across internal teams and with external contractors/vendors;

• Review the system reports and follow up the system alerts with the contractors/vendors;

• Monitor and report for the systems including system usage and healthiness of infrastructure, system services, system applications;

• Provide liaison and support to different stakeholders, and other B/Ds on the production setup and client rollout for the system;

• Self-motivated, able to work independently under pressure, multi-tasking and energetic;

• Work outside office hours and provide on-call production support;

• Review the health check monitoring procedure and automate tasks with other sub-systems;

• Provide daily administrative support and produce reports and deliverables meeting the internal standards and requirements of the project;

• Assist in planning the system maintenance events and carry out system maintenance activities for on-going support of the systems;

• Assist in assuring and controlling of the quality of the project deliverables produced by the contractors/vendors;

• Perform any work assigned by supervisor.

Requirements:

• Minimum of 4 years of post-qualification IT experience, in which includes a minimum of 1 years of working experience in system analysis and design;

• Minimum of 2 years of working experience system implementation and maintenance/support;

• Minimum of 2 years of working experience in SIEM for system monitoring and support;

• Knowledge and experience in data centre operation such as data centre security and network infrastructure are required;

• Knowledge and experience in working with and maintaining service management tool like Jira System Management is preferred;

• Valid certificate holder of Certified Information Systems Security Professional (CISSP) or Certified Information Security Professional (CISP) is required;

• Knowledge and experience in working with/in the Government is preferred;

• Good command in spoken and written English is required;

• Good command in spoken Mandarin is preferred;

• Criminal record checking is required.

Technical Skills:

• At least 2 years' experience in Infrastructure;

• At least 2 years' experience in Network and System Management;

• At least 2 years' experience in Security Incident Detection and Handling;

• At least 2 years' experience in System Implementation and Maintenance/Support;

• At least 2 years' experience in Windows NT Server Administration and Network Support;

• At least 1 year's experience in IT Security Scanning Tools.

Non-technical Skills:

• Good spoken English is a must;

• Good written English is a must;

• Good Putonghua is an advantage;

• Good coordination skills is an advantage;

• 1 year's experience in work with the Government is an advantage.

• Bachelor's degree/Higher Diploma in Computer Science, IT or equivalent;

• At least 4 years' post-qualification experience in which at least 1 year's relevant experience in a similar post and in a comparable capacity.

Please apply by email or WhatsApp by quoting Job Title with InfoTech's Job Key No (one alphabet prefix with up to five digits) as subject.  You may directly apply online for this post at https://www.infotech.com.hk/itjs/job/fe-view.do?method=feView&jjKey=34941

Email: itcareer@infotech.com.hk                         

Direct line for this post: (852) 3978 8032

General: (852) 2836 0363

WhatsApp: (852) 2836 0363

Address: 18/F, Tower 2, Lippo Centre, 89 Queensway, Hong Kong.

The information provided will be treated in strict confidence and be used only for consideration of your application for relevant / similar posts within the Group/ Company.