2027 Fresh Grad Hire - Security Operations Engineer

moomoo Shenzhen, Guangdong Province, China · HK$25K–HK$45K/yr

Financial Services · 1,001-5,000 employees

Yesterday

Junior (0-2 yrs) Full-time China

Create a free account to apply — email only, no card. You can also save this posting or score it against your profile with AI.

Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.

About the role

Participate in the development of security operations and protection systems while assisting in the monitoring and response to security incidents. Support the maintenance of cloud infrastructure security, including WAF configuration, vulnerability scanning, and security baseline checks.

What they look for

Vulnerability Analysis Threat Intelligence Security Incident Response WAF Configuration DDoS Protection Host Monitoring Container Security Network Security OWASP Top 10 Log Analysis MITRE ATT&CK Nmap Burp Suite Wireshark Cloud Security SQL

Requirements

Candidates should have a strong interest in cybersecurity and familiarity with network attack principles and common vulnerabilities. Proficiency in security tools and experience with cloud platforms or CTF competitions is preferred for this entry-level role.

Full description

Participate in the development of the company's security operations and protection system; under the guidance of a mentor, take part in day-to-day operations across areas such as vulnerability analysis, threat intelligence, and security incident detection and response.
Assist in the monitoring, analysis, and initial handling of security incidents; support issue localization, remediation follow-up, and post-mortem report writing; continuously learn and optimize protection strategies.
Assist in maintaining the day-to-day security operations processes for cloud infrastructure, including WAF configuration, DDoS protection, host monitoring, vulnerability scanning, image and container security management, and security baseline checks; learn to identify and assess security risks of cloud assets.

Strong interest in cybersecurity; understanding of common network attack and defense principles; familiarity with the OWASP Top 10 and common vulnerability principles (e.g., SQL injection, XSS, CSRF) is preferred.
Familiarity with mainstream security products and their underlying principles; Experience in any of the following is preferred (mastery not required):
Exposure to security devices or platforms such as WAF, firewalls, intrusion detection, vulnerability scanning, or host protection;
Understanding of the basic security services of mainstream cloud platforms such as AWS, Alibaba Cloud, or Tencent Cloud;
Participation in CTF competitions or campus security clubs, or ownership of a personal security blog or GitHub security projects, is preferred.
Understanding of the basic methods for security incident tracing and log analysis; familiarity with common attack chain models (e.g., MITRE ATT&CK); ability to use basic tools (e.g., grep, ELK, SQL queries) for log querying and correlation analysis is preferred.
English & Chinese as working languages: fluent reading and writing; able to read English regulations and standards documents, and to conduct day-to-day email and meeting communication in English.

Preferred Qualifications

Internship experience in security operations, penetration testing, or vulnerability analysis.
Self-taught proficiency in security tools (e.g., Nmap, Burp Suite, Wireshark) with the ability to perform basic operations.

*Open to candidates graduating between January 2026 and August 2027.