Assistant Manager/ Senior Officer, IT Network and Security

The Hong Kong Applied Science and Technology Research Institute (ASTRI) was founded by the Government of the Hong Kong Special Administrative Region in 2000 with the mission of enhancing Hong Kong’s competitiveness through applied research. ASTRI’s core R&D competence in various areas is grouped under five Technology Divisions: Communications Technologies, Artificial Intelligence and Trust Technologies, Advanced Electronic Components and Systems, IoT Sensing and AI Technologies, and Intelligent Perception and Control Technologies.

It is applied across six core areas which are Smart City, Financial Technologies, New Industrialisation and Intelligent Manufacturing, Digital Health, Application Specific Integrated Circuits, and Metaverse.

Over the years, ASTRI has nurtured a pool of research, I&T talents and received numerous international awards for its pioneering innovations as well as outstanding business and community contributions. ASTRI has transferred about 1,600 technologies to the industries and has been granted close to 1,200 patents in the Mainland, the United States, and other countries.

To support our constant endeavour to position Hong Kong as a world-class smart city and an international hub of innovation and technology, we are seeking qualified professionals to fill the following position(s):

Job Responsibilities:

• Technical Support
  • Provide technical support for network infrastructure, including routers, switches, firewalls, and related systems.
• Network Setup and Administration
  • Set up, maintain, upgrade, and monitor network and security systems.
• Documentation & Change
  • Assist and maintain documentation of network diagram, network configuration, and service records.
  • Follow ITIL change, incident and problem management processes.
• Contract Management
  • Review and renew vendor and service contracts, including all hardware and software maintenance agreements.
• Phishing Campaigns & Awareness
  • Plan, configure, and run regular phishing email simulations (e.g., monthly/quarterly).
  • Produce campaign reports (open/click/submit rates, trend analysis, risk segmentation).
  • Coordinate follow‑ups and targeted training for users who failed simulations; track completion and effectiveness.
• Vulnerability Management
  • Review vulnerability scan logs (infrastructure, endpoints, applications) to validate findings, prioritize by risk/business impact, and drive timely remediation with owners.
  • Track exceptions, mitigations, and patch status; maintain an audit‑ready trail.
• Security Monitoring & Daily Health
  • Review daily security reports to identify anomalies, indicators of compromise, and policy violations.
  • Open and track incidents/problem tickets; perform first‑line triage and coordinate with internal teams and vendors for containment and recovery.
  • Maintain KPIs/KRIs for detection, response, and remediation SLAs.
• Data Loss Prevention (DLP)
  • Monitor DLP alerts and reports, investigate events for false positives/true positives, and apply appropriate handling.
  • Contribute to DLP policy refinement and awareness content.
• Perform ad-hoc duties as assigned.

Job Requirements:

• High diploma or above in IT, Computer Science or related discipline.
• With at least 6 years of IT Infrastructure/operation experience. Candidates with less experience will also be considered.
• Professional experience and qualifications on network system or security system is a plus, such as CCNA or MCSA.
• Knowledge of networking (TCP/IP), LAN switching and IP routing.
• Able to work independently, self-motivated and with good communication skills.
• Good command of written and spoken English and Chinese, including Putonghua.
• Live ASTRI values.

The appointment will be on renewable contract terms with a competitive salary and performance-linked variable pay. Fringe benefits include paid leave, medical, insurance coverage and contribution to MPF. The incumbent will normally work a five-day week.

For interested parties, please submit your application with detailed CV within two weeks of the post date. Applicants are encouraged to submit their applications as soon as possible. The review of applications will continue until the post is filled.

The resume should not include any sensitive personal information such as ID card no. or travel document number, etc.

Position offer is subject to the applicant’s experience and academic qualification. Only short-listed candidates will be notified. ASTRI reserves the right not to fill the position.

ASTRI is an Equal Opportunities Employer. Personal data provided by job applicants will be used exclusively for recruitment only. For details, please refer to ASTRI Privacy Policy Statement.