2027 Fresh Grad Hire - Security Operations Engineer

moomoo Hong Kong, Hong Kong Island, Hong Kong S.A.R. · HK$25K–HK$45K/yr

Financial Services · 1,001-5,000 employees

Yesterday

Junior (0-2 yrs) Full-time Hong Kong S.A.R.

Create a free account to apply — email only, no card. You can also save this posting or score it against your profile with AI.

Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.

About the role

The role involves participating in security operations, including vulnerability analysis, threat intelligence, and incident response under mentor guidance. You will also assist in maintaining security processes for cloud infrastructure, such as WAF configuration, host monitoring, and security baseline checks.

What they look for

Security Operations Vulnerability Analysis Threat Intelligence Incident Detection Incident Response WAF Configuration DDoS Protection Host Monitoring Container Security Network Security OWASP Top 10 Log Analysis MITRE ATT&CK Cloud Security Penetration Testing Security Baseline Checks

Requirements

Candidates should have a strong interest in cybersecurity, familiarity with network attack principles, and knowledge of common vulnerabilities like SQL injection and XSS. Preferred qualifications include internship experience in security operations and proficiency with tools like Nmap, Burp Suite, and Wireshark.

Full description

Participate in the development of the company's security operations and protection system; under the guidance of a mentor, take part in day-to-day operations across areas such as vulnerability analysis, threat intelligence, and security incident detection and response.
Assist in the monitoring, analysis, and initial handling of security incidents; support issue localization, remediation follow-up, and post-mortem report writing; continuously learn and optimize protection strategies.
Assist in maintaining the day-to-day security operations processes for cloud infrastructure, including WAF configuration, DDoS protection, host monitoring, vulnerability scanning, image and container security management, and security baseline checks; learn to identify and assess security risks of cloud assets.

Strong interest in cybersecurity; understanding of common network attack and defense principles; familiarity with the OWASP Top 10 and common vulnerability principles (e.g., SQL injection, XSS, CSRF) is preferred.
Familiarity with mainstream security products and their underlying principles; Experience in any of the following is preferred (mastery not required):
Exposure to security devices or platforms such as WAF, firewalls, intrusion detection, vulnerability scanning, or host protection;
Understanding of the basic security services of mainstream cloud platforms such as AWS, Alibaba Cloud, or Tencent Cloud;
Participation in CTF competitions or campus security clubs, or ownership of a personal security blog or GitHub security projects, is preferred.
Understanding of the basic methods for security incident tracing and log analysis; familiarity with common attack chain models (e.g., MITRE ATT&CK); ability to use basic tools (e.g., grep, ELK, SQL queries) for log querying and correlation analysis is preferred.
English & Chinese as working languages: fluent reading and writing; able to read English regulations and standards documents, and to conduct day-to-day email and meeting communication in English.

Preferred Qualifications

Internship experience in security operations, penetration testing, or vulnerability analysis.
Self-taught proficiency in security tools (e.g., Nmap, Burp Suite, Wireshark) with the ability to perform basic operations.

*Open to candidates graduating between January 2026 and August 2027.