Cyber Security Engineer, SIEM Platform (Investment Banking)

A leading investment bank seeks a Cyber Security Engineer in Hong Kong to strengthen SIEM platform capabilities, enhance threat detection, and protect critical financial systems.

Key responsibilities:

• Lead the design, enhancement, and optimisation of SIEM security use cases and detection capabilities using frameworks such as MITRE ATT&CK to strengthen enterprise threat detection and incident response
• Drive cybersecurity investigations, threat hunting, and incident response activities by assessing security events, mitigating risks, and protecting critical production systems across the organisation
• Monitor the evolving cyber threat landscape, identify recurring security risks, and develop proactive detection, mitigation, and process improvement strategies to enhance security resilience
• Collaborate with regional, APAC, and global security teams to improve SOC operations, incident handling, detection readiness, and integrated monitoring capabilities through knowledge sharing and cross-functional partnership
• Ensure compliance with regulatory and internal security requirements by maintaining SOC playbooks, incident reporting, governance processes, and operational security controls

Candidate profile:

• Over seven years’ cybersecurity experience, including at least four years designing and developing SIEM security use cases with Java expertise
• Strong technical expertise in SIEM platforms, Linux (RedHat/Ubuntu), ELK Stack, and scripting languages including Python, PowerShell, Bash, and SQL, with experience analysing large datasets and automating security operations
• Hands-on experience in security incident investigation, threat hunting, remediation, threat modelling, and SecOps/DevOps environments within enterprise or production infrastructure
• Strong analytical, problem-solving, and communication skills with the ability to interpret complex logs, develop actionable threat models, manage multiple priorities, and collaborate effectively across global teams
• Relevant cybersecurity certifications such as SANS, CISSP, or OSCP are advantageous

About this company:

A leading financial services organisation is committed to strengthening cyber resilience through advanced security technologies and continuous innovation. It offers a collaborative and inclusive environment with ongoing learning opportunities, supportive leadership, and exposure to complex, business-critical security initiatives.

Keywords: Cyber Security Engineer, SIEM Engineer, Security Operations Centre (SOC), Incident Response, Threat Detection & Threat Hunting

What’s next:

Shape the next generation of threat detection and protect critical financial systems. Apply now!