Responsibilities

• Operate and tune CNAPP platform
• Monitor container runtime behaviour and respond to alerts
• Conduct cluster hardening reviews against CIS and NSA/CISA guidance
• Maintain visibility into image vulnerabilities using registry scanning
• Triage and track CVEs through full lifecycle
• Partner with DevOps and platform engineering to embed security requirements
• Develop and maintain runbooks, playbooks, and baseline documentation

Requirements

• Bachelor’s degree in Computer Science, Information Security, or related discipline
• Minimum 2 years of cybersecurity experience in cloud-native environments
• Experience with CNAPP platforms (Sysdig, Aqua, Prisma Cloud, Wiz, etc.)
• Practical knowledge of container security concepts and supply chain risks
• Fluent in English (written and spoken)
• Fluent in Cantonese (spoken)
• Experience integrating security gates into CI/CD pipelines
• Infrastructure-as-code security review (Terraform, Helm)
• Knowledge of OWASP Top 10 and API Security Top 10
• Understanding of authentication and authorisation patterns (OAuth 2.0, OIDC, JWT, mTLS)