# 2027 Fresh Grad Hire - Security Operations Engineer

**Company:** [moomoo](https://jobs.workable.com/companies/rYBPx6Li26wNSnbH8JV4qn.md)
**Location:** Hong Kong, Hong Kong
**Workplace:** on site
**Employment type:** Full-time

[Apply for this job](https://jobs.workable.com/view/c297ec51-7c01-4569-b190-284d51beb238)

## Description

-   Participate in the development of the company's security operations and protection system; under the guidance of a mentor, take part in day-to-day operations across areas such as vulnerability analysis, threat intelligence, and security incident detection and response.
-   Assist in the monitoring, analysis, and initial handling of security incidents; support issue localization, remediation follow-up, and post-mortem report writing; continuously learn and optimize protection strategies.
-   Assist in maintaining the day-to-day security operations processes for cloud infrastructure, including WAF configuration, DDoS protection, host monitoring, vulnerability scanning, image and container security management, and security baseline checks; learn to identify and assess security risks of cloud assets.

## Requirements

-   Strong interest in cybersecurity; understanding of common network attack and defense principles; familiarity with the OWASP Top 10 and common vulnerability principles (e.g., SQL injection, XSS, CSRF) is preferred.
-   Familiarity with mainstream security products and their underlying principles; Experience in any of the following is preferred (mastery not required):
-   Exposure to security devices or platforms such as WAF, firewalls, intrusion detection, vulnerability scanning, or host protection;
-   Understanding of the basic security services of mainstream cloud platforms such as AWS, Alibaba Cloud, or Tencent Cloud;
-   Participation in CTF competitions or campus security clubs, or ownership of a personal security blog or GitHub security projects, is preferred.
-   Understanding of the basic methods for security incident tracing and log analysis; familiarity with common attack chain models (e.g., MITRE ATT&CK); ability to use basic tools (e.g., grep, ELK, SQL queries) for log querying and correlation analysis is preferred.
-   English & Chinese as working languages: fluent reading and writing; able to read English regulations and standards documents, and to conduct day-to-day email and meeting communication in English.

**Preferred Qualifications**

-   Internship experience in security operations, penetration testing, or vulnerability analysis.
-   Self-taught proficiency in security tools (e.g., Nmap, Burp Suite, Wireshark) with the ability to perform basic operations.

\*Open to candidates graduating between January 2026 and August 2027.