ABOUT THE COMPANYBare Cove Technology (BCT) is an award-winning IT and cybersecurity solutions provider. Our team is made up of proven leaders in the fields of cybersecurity, software development, cloud technologies, and IT infrastructure and design. We support the top asset managers across the globe, helping our clients meet the evolving expectations of institutional investors and global regulators.Bare Cove Technology is in a rapid-growth phase and onboarding new clients across Hong Kong, Singapore, Australia, London and Dubai. To support our continued growth, BCT is looking to hire several new members for the team.

ABOUT THE ROLEBare Cove Technology is looking for a Cyber Security Analyst (Blue Team & Security Assessment) to join our growing cybersecurity team. The successful candidate will help clients assess, improve, and strengthen their cybersecurity posture through security assessments, cyber audits, vulnerability management, cloud security reviews, incident investigations, and security improvement initiatives.The role combines technical cybersecurity expertise with consulting and client-facing responsibilities. The successful candidate will work closely with clients across the financial services, asset management, banking, and enterprise sectors to identify security risks, evaluate existing controls, and deliver practical recommendations that improve security maturity and resilience.This role will be based in BCT’s DIFC (Dubai) office.

• Job Duties:Conduct cybersecurity assessments, security health checks, and security reviews across client environments.
• Perform security audits and gap assessments against industry standards, regulatory requirements, and cybersecurity best practices.
• Review client security architectures, including network, cloud, endpoint, identity, email, and infrastructure security controls.
• Assess the effectiveness of existing security controls and identify opportunities to improve clients' security posture.
• Perform vulnerability assessments and validate remediation activities.
• Analyse security alerts, phishing attacks, malware incidents, endpoint detections, and emerging cyber threats.
• Support incident investigation and response activities by identifying root causes and recommending corrective actions.
• Review and assess Microsoft 365, Azure, AWS, and other cloud security configurations.
• Develop prioritized remediation roadmaps and practical recommendations to address identified risks and weaknesses.
• Prepare detailed technical reports, executive summaries, risk registers, and audit findings for clients.
• Coordinate with internal and client teams on the remediation and closure of identified findings.
• Provide cybersecurity advisory services and guidance to clients on security best practices and risk reduction strategies.
• Assist clients with cybersecurity maturity improvement initiatives and security transformation projects.
• Support compliance initiatives relating to frameworks such as ISO 27001, NIST Cybersecurity Framework, CIS Controls, MAS TRM, SFC, DFSA, GDPR, PDPA and other applicable standards.
• Collaborate with clients to understand their security needs and provide tailored cybersecurity solutions.
• Stay up-to-date with the latest cybersecurity threats, technologies, industry trends, and regulatory developments.

• SKILLS AND QUALIFICATIONSRequired Skills and Qualifications:Prior experience in cybersecurity assessments, security operations, incident response, vulnerability management, security audits, or cybersecurity consulting.
• Strong understanding of cybersecurity principles, defensive security controls, and industry best practices.
• Experience reviewing and assessing security controls across cloud, network, endpoint, and identity platforms.
• Familiarity with Microsoft 365, Azure, Google Cloud, AWS, endpoint security, email security, SIEM, and EDR technologies.
• Experience analyzing cybersecurity incidents, security alerts, phishing attacks, and threat intelligence.
• Strong analytical, troubleshooting, and problem-solving skills.
• Proven ability to function in a self-directed environment with high levels of attention to detail.
• Must excel in a fast-paced, agile environment where critical thinking and strong problem-solving skills are required for success.
• Innovative thinker who is positive, proactive, and readily embraces change.
• Ability to always handle clients professionally.
• Willing to work outside standard business hours when necessary.
• Strong written and verbal English communication skills are required; Cantonese, Mandarin, or Arabic would be an advantage.
• Good Team Player.

• Preferred Skills and Qualifications:Relevant certifications such as Security+, CISM, CRISC, CEH, CISSP, CREST, SC-200, SC100, or similar are preferred.
• Experience with cloud security (M365, AWS, Azure, Google Cloud, etc.).
• Experience conducting cybersecurity audits, risk assessments, and compliance reviews
• Knowledge of security monitoring technologies including Sentinel, Defender XDR, CrowdStrike, Splunk, QRadar, Rapid7, or similar platforms.
• Knowledge of scripting languages such as Python or PowerShell.
• Familiarity with regulatory requirements and compliance standards
• 
  

ABOUT THE COMPANYBare Cove Technology (BCT) is an award-winning IT and cybersecurity solutions provider. Our team is made up of proven leaders in the fields of cybersecurity, software development, cloud technologies, and IT infrastructure and design. We support the top asset managers across the globe, helping our clients meet the evolving expectations of institutional investors and global regulators.Bare Cove Technology is in a rapid-growth phase and onboarding new clients across Hong Kong, Singapore, Australia, London and Dubai. To support our continued growth, BCT is looking to hire several new members for the team.

ABOUT THE ROLEBare Cove Technology is looking for a Cyber Security Analyst (Blue Team & Security Assessment) to join our growing cybersecurity team. The successful candidate will help clients assess, improve, and strengthen their cybersecurity posture through security assessments, cyber audits, vulnerability management, cloud security reviews, incident investigations, and security improvement initiatives.The role combines technical cybersecurity expertise with consulting and client-facing responsibilities. The successful candidate will work closely with clients across the financial services, asset management, banking, and enterprise sectors to identify security risks, evaluate existing controls, and deliver practical recommendations that improve security maturity and resilience.This role will be based in BCT’s DIFC (Dubai) office.

• Job Duties:Conduct cybersecurity assessments, security health checks, and security reviews across client environments.
• Perform security audits and gap assessments against industry standards, regulatory requirements, and cybersecurity best practices.
• Review client security architectures, including network, cloud, endpoint, identity, email, and infrastructure security controls.
• Assess the effectiveness of existing security controls and identify opportunities to improve clients' security posture.
• Perform vulnerability assessments and validate remediation activities.
• Analyse security alerts, phishing attacks, malware incidents, endpoint detections, and emerging cyber threats.
• Support incident investigation and response activities by identifying root causes and recommending corrective actions.
• Review and assess Microsoft 365, Azure, AWS, and other cloud security configurations.
• Develop prioritized remediation roadmaps and practical recommendations to address identified risks and weaknesses.
• Prepare detailed technical reports, executive summaries, risk registers, and audit findings for clients.
• Coordinate with internal and client teams on the remediation and closure of identified findings.
• Provide cybersecurity advisory services and guidance to clients on security best practices and risk reduction strategies.
• Assist clients with cybersecurity maturity improvement initiatives and security transformation projects.
• Support compliance initiatives relating to frameworks such as ISO 27001, NIST Cybersecurity Framework, CIS Controls, MAS TRM, SFC, DFSA, GDPR, PDPA and other applicable standards.
• Collaborate with clients to understand their security needs and provide tailored cybersecurity solutions.
• Stay up-to-date with the latest cybersecurity threats, technologies, industry trends, and regulatory developments.

• SKILLS AND QUALIFICATIONSRequired Skills and Qualifications:Prior experience in cybersecurity assessments, security operations, incident response, vulnerability management, security audits, or cybersecurity consulting.
• Strong understanding of cybersecurity principles, defensive security controls, and industry best practices.
• Experience reviewing and assessing security controls across cloud, network, endpoint, and identity platforms.
• Familiarity with Microsoft 365, Azure, Google Cloud, AWS, endpoint security, email security, SIEM, and EDR technologies.
• Experience analyzing cybersecurity incidents, security alerts, phishing attacks, and threat intelligence.
• Strong analytical, troubleshooting, and problem-solving skills.
• Proven ability to function in a self-directed environment with high levels of attention to detail.
• Must excel in a fast-paced, agile environment where critical thinking and strong problem-solving skills are required for success.
• Innovative thinker who is positive, proactive, and readily embraces change.
• Ability to always handle clients professionally.
• Willing to work outside standard business hours when necessary.
• Strong written and verbal English communication skills are required; Cantonese, Mandarin, or Arabic would be an advantage.
• Good Team Player.

• Preferred Skills and Qualifications:Relevant certifications such as Security+, CISM, CRISC, CEH, CISSP, CREST, SC-200, SC100, or similar are preferred.
• Experience with cloud security (M365, AWS, Azure, Google Cloud, etc.).
• Experience conducting cybersecurity audits, risk assessments, and compliance reviews
• Knowledge of security monitoring technologies including Sentinel, Defender XDR, CrowdStrike, Splunk, QRadar, Rapid7, or similar platforms.
• Knowledge of scripting languages such as Python or PowerShell.
• Familiarity with regulatory requirements and compliance standards
•