Security Analyst

Role Overview

• Role: Junior Security Analyst supporting divestment-related activities, with additional involvement in general infrastructure security tasks (not limited to ringfencing).
• Team Structure: Strong guidance from senior team members; deep security experience is not mandatory.
• Key Requirement: Solid cloud engineering background is essential.
• Preferred Profile: Candidates with system integration experience in cloud environments.
• Less Suitable Profile: Pure IT audit backgrounds, as the role requires hands-on, automation-driven work rather than manual processes.

Key Responsibilities

• Support security activities related to segregation and isolation of systems and environments, including implementation of network segmentation and access restrictions as required.
• Assist in reviewing and validating access controls across cloud environments to ensure appropriate levels of access are maintained.
• Work with application, infrastructure, and cloud teams to identify and track security control gaps and follow through on remediation actions.
• Support implementation and validation of security controls across infrastructure domains, including network security configurations and cloud access controls.
• Assist with security control testing, evidence collection, and documentation, supporting audit and compliance requirements.
• Coordinate with internal teams and third-party vendors to track security-related tasks and ensure timely delivery of agreed actions.
• Maintain documentation of configurations, exceptions, and temporary arrangements to ensure transparency and auditability.
• Provide general support to infrastructure security initiatives, including:
• Network security reviews (e.g., firewall rules, NSGs)
• Cloud access control governance (e.g., RBAC, privileged access)
• Tracking of security improvements and remediation activities
• Where applicable, support the team in automation of repetitive security processes, including using scripting or AI-assisted tools to improve efficiency in areas such as access review, reporting, and remediation tracking.

Qualifications

• 3–5 years of experience in cloud engineering, architecture, or DevOps on public cloud platforms such as AWS and Azure.
• 2–4 years of progressive experience related to cloud security, including cloud network security.
• Strong security mindset with knowledge and understanding of industry-standard Access Management Frameworks, Principle of Least Privileged Access, Just-in-Time Access, RBAC, and ABAC.
• Strong automation-first mindset with the ability to write automations to streamline common tasks, tests, and workflows.
• Knowledge of cloud platforms and DevOps tools including:
• AWS
• Terraform
• GitHub
• GitHub Actions
• Python
• JIRA
• Confluence
• Self-driven and able to meet objectives with minimal managerial oversight.
• Team player with the ability to interact with business unit security officers, security engineers, reliability engineers, and DevOps engineers.
• Advocates continuous learning, openness to change, and continuous improvement.
• Proficient in English, both verbal and written.

Must-Have Criteria

• Minimum 2 years of relevant experience in security and/or IT auditing.
• Open to candidates from any industry background.
• Must be proficient in English and Cantonese.

Good-to-Have Criteria

• Prior experience with AI automation or network security.
• Strong team player.
• Good interpersonal and communication skills.