Position Recruitment
AI Engineer / Software Developer / Full Stack Developer Roles / Data Scientist
Job duties:
-
Develop mobile apps with AI and computer vision technology, such as target detection, hand posture tracking, model compression, 3D pose detection
-
Study and research algorithm
-
Implement different computer vision scenarios
Requirements:
-
Possess undergraduate or postgraduate degrees in computer science, specifically with skills in data science, machine learning and AI.
-
Must be from top 100 universities, or local universities in Hong Kong.
-
Knowledge and skills in coding language e.g. Python, R, Matlab, C++.
-
Familiarity with AI platforms/environments e.g. TensorFlow, Pytorch
-
Familiarity with medical data is preferred e.g. blood tests, medical imaging (particularly CT and MRI data, DICOM data handling, image processing), genomics (e.g. GWAS, DNA methylation data).
Responsibilities include:
-
Following secure coding guidelines;
-
Protecting source code and development environments;
-
Avoiding hardcoded secrets and insecure configurations;
-
Participating in code review and security testing where applicable;
-
Supporting vulnerability remediation;
-
Using approved tools for secrets, repositories, CI/CD, and cloud services;
-
Reporting suspected security weaknesses or incidents;
-
Supporting secure deployment and change management processes.
Salary and Duration:
-
Candidates will be hired under the Research Talent Hub scheme (https://www.itf.gov.hk/en/funding-programmes/nurturing-talent/research-talent-hub/research-talent-hub-for-spc-projects-rth-spc-/index.html).
-
12-36 months depending on performance
-
The maximum monthly salary allowance is HK$20,000 for research talents with a bachelor degree, HK$23,000 for those with a master degree, and HK$35,000 for those with a doctoral degree.
-
An additional monthly living allowance of $10,000 will be provided to research talents participating in the RTH-SPC with doctoral degrees.
Project Manager
Job duties:
-
To oversea and manage the project
-
Design the sample
-
Supervise the installation
-
Conduct the test and collect trial result
-
Prepare the report
Requirements:
-
Bachelor degree or above with mobile client development experience.
-
Familiar with the operating mechanism and architecture of python system.
-
Understanding various components and SDKs.
-
Experience in front-end/hybrid development technology stack is preferred.
-
Familiar with one or more languages in OC/Swift/Java/Kotlin.
-
Have a solid foundation of data structure and algorithm analysis, and be familiar with common design patterns, multithreading, network, and interface development.
Responsibilities include:
-
Supporting onboarding and offboarding processes;
-
Notifying technical personnel when access needs to be created or removed;
-
Supporting asset assignment and return;
-
Supporting visitor and office security practices where applicable;
-
Maintaining relevant administrative records;
-
Supporting employee security awareness activities.
Information Security Manager
Job duties:
-
Conduct the site work and installation
-
Responsible for model training and testing
-
Responsible for the architecture design and development of the website
-
Responsible for version optimization, such as memory, performance, adaptation, user experience and other tuning work
Requirements:
-
Experience: 5+ years of dedicated experience in Information Security, Cloud Security, or Cybersecurity engineering roles, preferably within a modern IT/tech company.
-
Cloud Expertise: Proven hands-on experience securing AWS and Google Cloud (GCP) environments.
-
DevSecOps Mastery: Strong understanding of secure coding practices and hands-on experience integrating security tools (like Snyk) into GitHub Actions or similar CI/CD pipelines.
-
Network Defense: Practical experience configuring and managing Cloudflare (WAF, CDN, Zero Trust).
-
SaaS Security: Experience administering enterprise security policies within Google Workspace.
-
Analytical Skills: Strong ability to analyze logs, identify anomalies, and lead security incident investigations.
-
Communication: Excellent English communication skills to translate complex security risks into actionable business decisions for leadership and technical teams alike.
Responsibilities:
-
Cloud & Infrastructure Security: Design and enforce security architectures across our multi-cloud environments, specifically AWS and Google Cloud (GCP). Manage Identity and Access Management (IAM), security groups, and cloud security posture management.
-
DevSecOps & Application Security: Integrate security directly into our CI/CD pipelines. Work with engineering to manage source code security via GitHub and lead vulnerability scanning, software composition analysis (SCA), and container security using Snyk.
-
Network & Edge Security: Configure and manage Cloudflare for DDoS protection, Web Application Firewall (WAF), DNS security, and Zero Trust network access.
-
Corporate IT Security: Oversee the security configurations and access controls within Google Workspace, ensuring secure endpoint management, data loss prevention (DLP), and secure communication for all employees.
-
Incident Response & Monitoring: Develop and lead our Incident Response Plan. Monitor security logs, investigate suspicious activities, and mitigate active threats in real-time.
-
Compliance & Risk Management: Lead internal security audits and ensure compliance with relevant industry standards (e.g., ISO 27001, SOC 2, GDPR). Conduct regular risk assessments and third-party vendor security reviews.
-
Security Awareness: Foster a security-first culture by conducting regular security training and phishing simulations for all employees.
Information Security & Compliance Officer
Requirements:
-
Experience or knowledge in ISMS, ISO 27001, information security, audit, risk, or compliance;
-
Good documentation and communication skills;
-
Familiar with security controls such as access control, MFA, incident response, data protection, supplier review, and secure development;
-
Able to work independently in a small-company environment;
-
Experience with cloud / SaaS security, GitHub / GitLab, CI/CD, or vulnerability scanning is an advantage;
-
ISO 27001, CISA, CISM, CISSP, Security+, or related certification is preferred but not mandatory.
Responsibilities:
-
Maintain ISMS policies, procedures, registers, and audit evidence;
-
Coordinate risk assessments and maintain the risk register;
-
Prepare evidence for customer security reviews and external audits;
-
Support access reviews, asset inventory, incident records, and supplier reviews;
-
Work with engineering teams on secure SDLC, CI/CD security testing evidence, and release sign-off records;
-
Support privacy, data protection, business continuity, and security awareness documentation;
-
Track audit findings and remediation actions.v
Part-time/Full-time technician
Job duties:
-
Conduct the site work and installation
-
Responsible for model training and testing
-
Responsible for the architecture design and development of the website
-
Responsible for version optimization, such as memory, performance, adaptation, user experience and other tuning work
Requirements:
-
Standard salary of a Bachelor degree staff.
-
High Diploma or above in Computer Science, Information Technology or a related discipline preferred.
-
Strong in front-end development (HTML5, CSS3, JavaScript); knowledge and experience in RWD, SPA (especially ReactJS & NextJS) is a must.
-
Familiar with Agile / SCRUM; version control (e.g. git).
-
Strong in back-end development technology stack (e.g. Linux, Nginx, MariaDB, NodeJS, Springboot) is a plus.
-
Experience in Cloud computing (e.g.AWS) and GraphQL is a plus.
-
Ability to work independently or with a team to meet project deadlines.
-
A good team player with positive thinking, willing to learn and is flexible.
-
Good command of spoken and written English and Chinese.
Responsibilities:
-
Supporting setup, maintenance, and troubleshooting of company laptops, devices, software, and approved tools;
-
Assisting with user account setup, modification, and removal when approved by the CTO or authorized person;
-
Supporting installation and configuration of endpoint security tools, operating system updates, and approved software;
-
Assisting with MFA setup, password reset support, and access troubleshooting;
-
Supporting backup, recovery, logging, monitoring, or system health checks where assigned;
-
Supporting vulnerability remediation, patching, and software updates where applicable;
-
Reporting suspected security incidents, malware, phishing, lost devices, unauthorized access, or abnormal system behavior;
Click to Apply via Google Form below, or email your CV to hkuitltd@hkuit.com