{"id":1285991,"url":"https://alion.io/job/fixed-inc-analyst-it-security-engineering-it","title":"Analyst, IT Security Engineering, IT","company":{"id":2026960,"name":"CITIC CLSA","domain":"clsa.com","url":"https://alion.io/company/clsa-com","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":85,"open_postings":251,"ghost_share":0.171,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":75,"computed_at":"2026-10-16T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Hong Kong"],"countries":["HK"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":47000,"max_usd":112000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":714},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Anthropic","optional":false},{"name":"AWS","optional":false},{"name":"AWS Bedrock","optional":false},{"name":"Azure","optional":false},{"name":"Burp Suite","optional":false},{"name":"Claude","optional":false},{"name":"Copilot","optional":false},{"name":"GCP","optional":false},{"name":"Gemini","optional":false},{"name":"Linux","optional":false},{"name":"Metasploit","optional":false},{"name":"Nessus","optional":false},{"name":"Nmap","optional":false},{"name":"OneDrive","optional":false},{"name":"OpenAI","optional":false},{"name":"PKI","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"Red Teaming","optional":false},{"name":"SharePoint","optional":false},{"name":"SLI/SLO/SLA","optional":false},{"name":"Windows","optional":false},{"name":"Zero Trust","optional":false},{"name":"Akamai","optional":true},{"name":"AWS WAF","optional":true},{"name":"Cloudflare","optional":true},{"name":"Okta","optional":true},{"name":"Zscaler","optional":true}],"status":"live","first_seen_at":"2026-07-10T00:00:00Z","employer_posted_date":"2026-07-10","last_verified_at":"2026-10-15T22:03:25Z","board_verified":true,"closed_at":null,"days_open":98,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":98},"description":"Position Description\nWe are looking for an IT Security Analyst who is proactive, self-motivate, willing- to-do attitude to be part of an international IT Security team to engineer and support security solutions.\nAs a team member in IT security team, you will be a contributor to the company’s IT and Cyber security strategy and operations. You and your team will be managing a portfolio of IT security tools in identity access management, network intrusion detection system, endpoint protection, email security, data leakage protection, application security, and other information security controls.\nKey Areas of Responsibilities\nConduct penetration testing, vulnerability scanning and code review on different IT systems and technologies\n\nPerform architecture Review and security assessments on IT systems’ design, configuration, source code review on both On-Perm and Cloud\n\nConduct Cyber-attack simulation using red team / blue team / purple team exercises\n\nPrepare and review reports on identified security vulnerabilities and possible recommendations to remediate the vulnerabilities\n\nPerform access review for vendor and guest access on IT systems and services.\n\nAssist on Evaluating, Design, planning and implementing IT security solutions, such as Web Application Firewalls, Single Sign On/MFA, Biometric authentication, Cloud Based Public Key Infrastructure (PKI), Malware Sandboxing, AI red teaming, Zero Trust Solutions, etc.\n\nAssist on first and second level support for some of IT security controls and tools including penetration test tools, vulnerability scanning tools, etc.\n\nBe the subject matter expert for some of the IT Security tools.\n\nBuild and maintain an effective working relationship with the team’s key stakeholders - IT Security team members, IT teams and business teams.\n\nDesign and deliver new strategic security initiatives with collaboration from business partners.\n\nMaintain an Up-to-date understanding of the latest threats, vulnerabilities, mitigation and industry best practices, Post Quantum Computing standard (ML-KEM, ML-DSA, SLA-DSA), and developments in Artificial Intelligence.\n\nRequirements\nBachelor Degree of above in IT, Computer Science\n\n3-5 years related experience in cybersecurity, with knowledge in regulatories\n\nPreferably holds IT Security Certifications such as CISSP, CISA, CISM, etc. Certificates related to offensive security (e.g. OSCP, OSWP, OSEP or equivalent) are an advantage.\n\nCandidates with backgrounds in Big4, IT consultancy firms, or Cyber Threat Intelligence are welcome to apply\n\nHands-on experience with penetration test and vulnerability scanning tools such as Burp Suite, Metasploit, ZAP, Qualys, Tenable/Nessus, Nmap, etc\n\nStrong communication skills in English and Chinese, as well as project management skills\n\nExperience of offensive security services on Web, Network, Server, Client Apps, Mobile, AI, Internet of Thing (IOT) is required:\nPenetration testing\n\nSecurity risk assessment/technical review\n\nConfiguration review\n\nVulnerability scanning and assessment\n\nKnowledge and understanding of the following areas are the foundation to succeed on this role:\nMicrosoft 365 cloud services - e.g. Exchange online, Sharepoint, OneDrive, Teams, etc\n\nPublic Cloud computing platforms - Microsoft Azure, AWS, GCP, Ali Cloud, Tencent Cloud, etc\n\nAI Tools/Models - OpenAI GPT, Anthropic Claude, Google Gemini, Microsoft Copilot, Amazon Bedrock, Grok\n\nIP/Cisco Networking\n\nVirtualization Technology\n\nMicrosoft Active Directory, Microsoft Certificate Authority, Microsoft Windows servers and Linux\n\nStorage and Database fundamental\n\nGood-to-have\nKnowledge of two or more of the following security areas below is a plus:\nWeb Application Firewalls (Akamai, Cloudflare, AWS WAF, Azure WAF), Web filtering, DDoS protection\n\nSingle Sign On/MFA (Microsoft Entra/Okta/Cisco Duo)\n\nMalware Sandboxing, Microsoft Cloud PKI and Intune\n\nZero Trust Solution (Zscaler, Palo Alto Networks, Microsoft Entra Private Access)\n\nStay informed on CITIC CLSA Job Opportunities\nNot the right fit? You can create a job alert to receive our latest job openings that meet your interest.","description_format":"text","description_chars":4125,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Investment Banking & M&A Advisory","Online Brokerage & Trading Platforms","Financial Data & Market Intelligence"],"lifecycle":[{"event":"open","at":"2026-09-26T04:35:54Z"}],"visa":[],"liveness":{"score":27,"band":"fade","label":"Fading","p_open":1,"p_active":0.622,"p_room":0.44,"age_days":98,"expected_fill_days":75,"reasons":["conf:7","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/fixed-inc-analyst-it-security-engineering-it","json_url":"https://alion.io/job/fixed-inc-analyst-it-security-engineering-it.json","meta":{"generated_at":"2026-10-16T19:30:06Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5128,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2026960},"rest":"https://alion.io/mcp/rest/get_company?id=2026960"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ffixed-inc-analyst-it-security-engineering-it"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ffixed-inc-analyst-it-security-engineering-it"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ffixed-inc-analyst-it-security-engineering-it"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/fixed-inc-analyst-it-security-engineering-it\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ffixed-inc-analyst-it-security-engineering-it"}]}