• Good working environment
• Excellent Benefit and work environment
• 5 days’ work

Responsibilities :

• Provide technical support in the design, establishment, operation, and system optimization of the Splunk Security Information and Event Management (SIEM) platform, and to ensure the effective security operations of various security technologies and detection of cyber security incident.
• Perform system installation & configuration, system patching, system testing and commissioning, as well as disaster recovery drill.
• Prepare security incident playbooks and maintain documentation to supported systems, projects, inventory and regulatory requirements.
• Perform problem diagnosis, resolve problem, identify root cause and assure quality change control
• Liaise with SOC’s cyber security consultants to tackle cyber security incidents.
• Monitor threat intelligence feeds and evaluate security vulnerabilities and threats and implement risk mitigation measures.

Requirements :

• Degree in Computer Science, Information Technology or related discipline
• Minimum 5 years’ relevant working experience in Splunk SIEM / security log management
• Certification on Splunk Enterprise Security administrator is an advantage
• In-depth experience in the setup and writing of Splunk SIEM correlation rules
• Knowledge in security threat and attack countermeasure
• Familiar with security incident handling and SOC processes
• Hands-on experience in the design, implementation, and management of SIEM infrastructure
• Capable to work independently
• Strong & demonstrable analytical problem solving and troubleshooting skill
• Effective time management and organizational skill
• Good written and spoken English and Chinese (Cantonese)

Interested parties please send your full resume with your current and expected salary by clicking  'Apply Now'