• Responsible for the general site operations of our construction projects

• Minimum 5 years of relevant experience in Civil/ Building projects in main-contractor side
• Holder of TCP T1 or equivalent
• Holder of Certificate in Safety Supervisor

• Responsible for carry out assessment on effect of proposed construction activities and precautionary measures to ensure the overall stability on the whole or any part of the works for our construction projects.

• Degree in Structural Engineering or equivalent.
• Minimum 8 years of relevant site experience preferably from main contractors.
• MiC design experience is preferred.
• Candidate with less experience will be considered as Structural Engineer

• Responsible for carry out assessment on effect of proposed construction activities and precautionary measures to ensure the overall stability on the whole or any part of the works for our construction projects.

• Degree in Construction Management / Civil / Construction Engineering or equivalent, preferably with relevant professional qualification.
• Minimum 6 years site experience.
• Candidates with less experience will be considered as Engineer.

· Client Engagement: Build strong relationships with potential clients to understand their challenges and requirements in the construction industry.
· Solution Development: Design and present customized technology solutions that address clients’ needs, focusing on improving efficiency, productivity, and project outcomes.
· Demonstrations & Presentations: Conduct product demonstrations and presentations to showcase our technology and its benefits.
· Technical Expertise: Provide expert advice on product features and functionalities, and how they can be utilized in various construction scenarios.
· Collaboration: Collaborate with sales, engineering, and product teams to ensure alignment on client requirements and solution capabilities.
· Proposal Development: Assist in the preparation of proposals and RFP responses that reflect the client's needs and our unique value proposition.
· Market Insights: Stay updated on industry trends, competitor products, and innovations in construction technology to provide strategic input.
· Training & Support: Offer training sessions for clients and internal teams to enhance understanding of our technology solutions.

· Education: Bachelor’s degree in Construction Management, Engineering, Computer Science, or a related field; advanced degree is a plus.
· Experience: 5+ years of presales or technical sales experience in the technology sector, and 2+ years in construction technology or related fields.
· Technical Skills: Strong understanding of construction processes, project management, and related technologies (e.g., Smart Construction, 4S, AI, BIM, UAV, Robotics).

· Develop Sales Strategy: Create and implement an effective sales strategy tailored for the Asian market, focusing on construction, infrastructure, and industrial sectors.
· Market Research: Conduct market research to identify potential customers, including government agencies, infrastructure providers, and engineering companies.
· Relationship Management: Build and maintain strong relationships with key stakeholders, including decision-makers, engineers, and technical experts.
· Lead Generation: Generate leads, qualify prospects, and manage the sales pipeline through effective communication and follow-up.
· Presentations & Proposals: Prepare and deliver compelling presentations and proposals that showcase the value proposition of our ConTech solutions, including Smart Construction, 4S, BIM, UAV, and Robotics.
· Collaboration: Collaborate with internal teams, including engineering, product development, and marketing, to ensure a seamless customer experience.
· Performance Tracking: Track and analyze sales performance metrics, identify areas for improvement, and implement corrective actions.
· Industry Awareness: Stay abreast of industry trends, ConTech technologies, and competitor activities to maintain a competitive edge.
· Travel: Travel within Asia to meet with clients and attend industry events.

· Education: Bachelor's degree in Engineering, Business Administration, or a related field.
· Experience: Minimum 5 years of proven experience in sales and business development, preferably in ConTech or related fields.
· Technical Knowledge: Strong understanding of ConTech technology, including its applications, benefits, and challenges.
· Communication Skills: Excellent communication, presentation, and interpersonal skills; strong analytical and problem-solving abilities.
· Client Relations: Ability to build rapport and trust with clients at all levels.
· Motivation: Self-motivated and results-oriented with a strong work ethic.
· Language Proficiency: Fluency in English and Mandarin is highly preferred.

The duties and responsibilities of the resident architect shall include but not limited to the following:

1. to watch and inspect, to test and examine materials used and workmanship employed in the architectural work, to ensure that they are complying with the Client’s Requirements, the Specification, Approved Design, approved drawings, construction procedure, statutory requirements with the assistance of the site supervisory staff;

2. to identify defective materials and workmanship in the architectural work not complying with the Client’s Requirements, the Specification, Approved Design, approved drawings and construction procedure, and to coordinate appropriate tests on the defective architectural work;

3. to communicate with the ASP or site supervisory staff on architectural work;

4. to resolve on Site architectural difficulties arising from unforeseen circumstances to allow the architectural works to progress with minimum disruption, and in case of action involving changes to design, consult the ASP;

5. to maintain site record on architectural work and to coordinate the checking of architectural work with the assistance of site supervisory staff;

6. to monitor the progress and to produce timely information in advance of construction to avoid delay;

7. to coordinate builder’s works requirements in connection to building services and deal with the consequential changes to architectural design and to produce sketch plans and working drawings;

8. to submit for acceptance any architectural details, in particular any Temporary Work as required in the Contract;

9. to attend regular and ad hoc meetings;

10. to prepare design, estimate and specification in collaboration with allied disciplines;

The resident architect shall be a Registered Architect in Hong Kong and shall have minimum 3 years relevant post-professional qualification experience

【About the Role】
We are seeking a meticulous and experienced Test Engineer to lead quality assurance efforts for our Smart Campus, IoT, and Big Data platforms. This role is responsible for designing comprehensive test strategies, executing various types of testing across the software development lifecycle, and coordinating with internal teams, clients, and third-party vendors to ensure end-to-end quality of our innovative solutions.
You will work at the intersection of development, business stakeholders, and external partners, ensuring that our software products meet the highest standards of functionality, performance, security, and user satisfaction before deployment.
【Key Responsibilities】
1. Test Strategy & Planning
- Design and develop comprehensive test strategies, test plans, and test cases for complex software systems spanning web applications, mobile apps, and IoT device integrations.
- Define testing scope, objectives, entry/exit criteria, and deliverables for each testing phase across all testing types (functional, performance, security, compatibility, etc.).
- Select and implement appropriate testing methodologies, tools, and frameworks based on project requirements.
- Establish test environment requirements and coordinate with DevOps/Infrastructure teams to set up and maintain test environments.
2. Functional Testing
- Lead System Testing efforts to validate end-to-end functionality against business requirements.
- Conduct System Integration Testing (SIT) to verify interactions across multiple subsystems: frontend, backend, databases, IoT devices, and third-party integrations.
- Perform API testing (RESTful, WebSocket, MQTT) to validate data exchange, error handling, and protocol compliance.
- Execute database testing to verify data integrity, consistency, and accuracy of CRUD operations.
- Conduct regression testing to ensure new features do not adversely impact existing functionality.
3. Non-Functional Testing
- Performance Testing:
- Design and execute load testing to verify system behavior under expected user concurrency.
- Conduct stress testing to identify system breaking points and recovery mechanisms.
- Perform endurance/soak testing to detect memory leaks and performance degradation over time.
- Execute spike testing to assess system response to sudden traffic surges.
- Security Testing:
- Conduct vulnerability scanning and basic penetration testing to identify security weaknesses.
- Verify authentication, authorization, and data encryption mechanisms.
- Test for common vulnerabilities (OWASP Top 10) in web and mobile applications.
- Compatibility Testing:
- Test across different browsers (Chrome, Firefox, Safari, Edge) and devices (desktop, tablet, mobile).
- Verify mobile app compatibility across iOS/Android versions and device models.
- Test IoT device compatibility with different firmware versions and communication protocols.
- Usability Testing:
- Evaluate user interface intuitiveness and overall user experience.
- Gather feedback from internal users and stakeholders for UI/UX improvements.
- Reliability Testing:
- Verify system stability under prolonged operation.
- Test disaster recovery and failover mechanisms.
4. User Acceptance Testing (UAT)
- Plan and facilitate User Acceptance Testing (UAT) sessions with Hong Kong clients and stakeholders.
- Prepare UAT test plans, test scripts, and acceptance criteria aligned with business requirements.
- Guide clients through the UAT process, demonstrating test scenarios and collecting feedback.
- Document UAT results, track issues raised by users, and coordinate with development teams for resolution.
- Obtain formal sign-off from clients upon successful UAT completion.
5. Internal Test Leadership
- Lead and coordinate internal testing efforts across multiple projects and releases.
- Mentor and guide junior testers, assigning tasks and reviewing test deliverables.
- Establish and enforce testing standards, best practices, and quality gates within the team.
- Conduct test case reviews with developers, business analysts, and product managers to ensure comprehensive coverage.
- Track and report on key quality metrics: defect density, test coverage, test execution progress, and defect aging.
6. Third-Party & Vendor Coordination
- Collaborate with third-party vendors and external partners to conduct joint testing activities.
- Review vendor-provided test reports and validate their testing completeness.
- Coordinate with vendors to set up integrated test environments and execute end-to-end scenarios.
- Verify that vendor-delivered components meet acceptance criteria before system integration.
7. Defect Management & Reporting
- Establish and maintain a defect tracking process using industry-standard tools (Jira, Azure DevOps, TestRail).
- Log, prioritize, and track defects throughout their lifecycle, ensuring timely resolution and verification.
- Provide regular test status reports and quality dashboards to project managers and stakeholders.
- Conduct root cause analysis for critical defects and recommend process improvements.
8. Test Automation
- Identify opportunities for test automation and implement automated test scripts for regression testing.
- Develop and maintain automated API tests using tools like Rest Assured, Postman (Newman), or similar.
- Implement UI automation (Selenium, Cypress) for critical web application workflows.
- Set up mobile automation (Appium) for regression testing of mobile apps.
- Integrate automated tests into CI/CD pipelines for continuous quality assurance.
9. Documentation & Knowledge Sharing
- Create and maintain comprehensive test documentation: test plans, test cases, test data, and test reports.
- Document UAT procedures and user guides for client reference.
- Contribute to the continuous improvement of testing processes and methodologies.

【Qualifications & Requirements】
Education:
- Bachelor's degree or higher in Computer Science, Information Technology, Software Engineering, or a related field.
Must-Haves:
1. Work Experience
- Minimum 3-5 years of software testing experience, with demonstrated expertise across multiple testing types (functional, integration, performance, security, etc.).
- Proven experience testing IoT platforms, smart building systems, or data-intensive applications.
- Experience leading testing efforts and coordinating with external stakeholders (clients, vendors).
- Experience delivering Hong Kong local projects and working with Hong Kong clients is highly preferred.
2. Testing Expertise
Test Strategy & Planning:
- Strong knowledge of software testing methodologies, techniques, and best practices across the full testing lifecycle.
- Experience designing comprehensive test strategies covering all testing types.
- Ability to define test scope, entry/exit criteria, and quality metrics for each testing phase.
Functional Testing:
- Extensive experience in system testing and integration testing for distributed systems.
- Proficiency in API testing tools: Postman, SoapUI, Swagger Inspector, or similar.
- Experience testing message-based integrations (MQTT, WebSocket, Kafka, RabbitMQ).
- Strong database testing skills with ability to write complex SQL queries for data validation.
Non-Functional Testing:
- Performance Testing: Experience with tools like JMeter, LoadRunner, Gatling, or K6. Ability to design load test scenarios and analyze results.
- Security Testing: Familiarity with vulnerability scanning tools (OWASP ZAP, Burp Suite) and common security vulnerabilities.
- Compatibility Testing: Experience testing across browsers, devices, and platforms.
- Usability Testing: Ability to evaluate UX and provide constructive feedback.
User Acceptance Testing (UAT):
- Proven experience facilitating UAT sessions with clients and managing user feedback.
- Ability to translate business requirements into UAT test scenarios and scripts.
- Strong interpersonal skills for guiding clients through testing and managing expectations.
Defect Management:
- Proficiency with defect tracking tools: Jira, Azure DevOps, TestRail, HP ALM.
- Experience establishing defect workflows and tracking metrics.
Test Automation:
- Hands-on experience with test automation frameworks: Selenium, Cypress, Appium, Rest Assured.
- Familiarity with CI/CD integration and version control (Git).
3. Technical Skills
- Understanding of software architecture and ability to read technical documentation (API specs, system design documents).
- Basic knowledge of programming languages (Java, Python, JavaScript) for test script development.
- Familiarity with IoT device communication protocols: MQTT, HTTP/HTTPS, WebSocket, CoAP.
- Understanding of containerization (Docker) and test environment setup.
- Experience with version control systems (Git) and CI/CD concepts.
4. Language Requirements
- Cantonese: Fluent (must-have for UAT facilitation with Hong Kong clients and local stakeholder communication).
- English: Proficient (able to read technical documentation, write test reports, and communicate with international partners).
- Mandarin: Working proficiency (advantageous for communication with Mainland China development teams and vendors).
5. Preferred Certifications
- ISTQB Certified Tester (Foundation Level or Advanced Level)
- Certified Agile Tester (CAT)
- Certified Test Manager (CTM)
- ISTQB Performance Testing or Security Testing certifications
- AWS/Azure Fundamentals (for cloud-based testing)
6. Industry Knowledge (Preferred)
- Experience in Smart Parks, Smart Buildings, IoT solutions, or Big Data platforms.
- Familiarity with facility management systems, energy management systems, or EV charging platforms.
- Understanding of data privacy and security testing requirements (PDPO, GDPR).
- Experience testing mobile applications (iOS/Android) and cross-platform compatibility.
【Key Competencies】
- Quality Advocate: Deep commitment to delivering high-quality software that meets user expectations.
- Analytical Thinker: Ability to dissect complex systems, identify edge cases, and design comprehensive test scenarios.
- Client-Facing: Comfortable and confident when facilitating UAT sessions with clients and managing feedback.
- Detail-Oriented: Meticulous approach to test case design, defect documentation, and quality metrics.
- Collaborative: Works effectively with developers, product managers, business analysts, and external partners.
- Problem Solver: Persistent in investigating issues and driving them to resolution.
- Process-Minded: Ability to establish and enforce testing standards and best practices.
- Continuous Learner: Stays updated on testing methodologies, tools, and industry trends.

【About the Role】
We are seeking a skilled Backend Engineer to design and build robust, scalable server-side systems for our Smart Campus and IoT platforms. This role focuses on API development, microservices architecture, database design, and system integration to support both web frontend and mobile applications.
You will work closely with frontend and mobile engineers to deliver high-performance, reliable backend services that power our innovative solutions.
【Key Responsibilities】
1. Backend Development & Architecture
- Design, develop, and maintain RESTful APIs and WebSocket services using Java and Spring Boot.
- Implement microservices architecture following best practices for scalability, resilience, and maintainability.
- Develop business logic, data processing pipelines, and integration services for IoT device data streams.
- Optimize backend performance, ensuring low latency and high throughput for concurrent requests.
2. Database Design & Management
- Design and optimize database schemas using MySQL (relational) and MongoDB (NoSQL) based on data requirements.
- Implement Redis caching strategies to improve system performance and reduce database load.
- Write efficient, complex SQL queries and optimize database indexes for fast data retrieval.
- Manage data migration, backup, and recovery processes.
3. IoT Integration & Data Processing
- Develop services to ingest, process, and store high-volume IoT device data (telemetry, events, alerts).
- Implement protocols for IoT communication: MQTT, CoAP, HTTP/2, WebSocket.
- Design real-time data processing pipelines for device monitoring and alerting.
- Manage device lifecycle: registration, authentication, firmware updates, and status tracking.
4. System Integration
- Integrate with third-party services and APIs: cloud platforms, payment gateways, notification services.
- Implement message queues (RabbitMQ/Kafka) for asynchronous processing and event-driven architecture.
- Support Elasticsearch implementation for advanced search and analytics capabilities.
5. Security & Quality Assurance
- Implement backend security best practices: authentication (JWT, OAuth2), authorization, input validation, and data encryption.
- Write comprehensive unit tests and integration tests (JUnit, Mockito) to ensure code quality.
- Participate in code reviews to maintain code quality and share knowledge.
- Document APIs using Swagger/OpenAPI specifications.
6. DevOps & Deployment
- Collaborate with DevOps engineers on CI/CD pipeline integration.
- Deploy and manage services in containerized environments (Docker, Kubernetes).
- Monitor system performance, troubleshoot production issues, and implement fixes.
- Support on-premise deployments for Hong Kong clients when required.

【Qualifications & Requirements】
Education:
- Bachelor's degree or higher in Computer Science, Information Technology, Software Engineering, or a related field.
Must-Haves:
1. Work Experience
- Minimum 5+ years of backend development experience, with focus on Java ecosystem.
- Experience developing backend systems for IoT, Smart Buildings, or connected device platforms.
- Proven track record of delivering scalable, high-performance systems handling concurrent data streams.
- Experience contributing to Hong Kong local projects is highly preferred.
2. Technical Skills
Core Backend:
- Java: Expert-level proficiency, with deep understanding of multi-threading, concurrency, and memory management.
- Spring Ecosystem: Strong experience with Spring Boot, Spring Security, Spring Data JPA, Spring Cloud.
- Microservices: Hands-on experience designing and implementing microservices architecture, including service discovery, API gateways, and distributed tracing.
- API Design: Expertise in RESTful API design principles, versioning, and documentation (Swagger/OpenAPI).
Database:
- MySQL: Advanced skills in database design, query optimization, indexing strategies, and replication.
- Redis: Experience implementing caching strategies, session stores, and rate limiting.
- MongoDB: Working knowledge of NoSQL database design and aggregation pipelines (preferred).
IoT & Messaging:
- Experience with MQTT brokers (Mosquitto, EMQX, HiveMQ) and IoT communication protocols.
- Hands-on experience with message queues: RabbitMQ or Kafka for event streaming.
- Understanding of time-series data processing and storage (InfluxDB, TimescaleDB) is a plus.
Testing & Quality:
- Strong experience with unit testing (JUnit, TestNG) and integration testing.
- Familiarity with mocking frameworks (Mockito) and test containers.
- Knowledge of performance testing tools (JMeter, Gatling) is a plus.
DevOps & Tools:
- Familiar with Docker containerization and container orchestration (Kubernetes basics).
- Experience with CI/CD tools (Jenkins, GitLab CI, GitHub Actions).
- Proficient with Git version control and build tools (Maven, Gradle).
- Basic Linux system administration skills for troubleshooting.
3. Language Requirements
- Cantonese: Fluent (must-have for team collaboration and client interaction).
- English: Working proficiency (able to read technical documentation).
- Mandarin: Advantageous for communication with Mainland China teams.
4. Preferred Qualifications
- Experience in Smart Parks, Smart Buildings, or IoT solutions.
- Familiarity with big data technologies: Hadoop, Spark, Kafka Streams.
- Experience with Elasticsearch for search and log analytics.
- Knowledge of cloud platforms: AWS IoT Core, Azure IoT Hub, or Alibaba Cloud IoT.
- Understanding of cybersecurity best practices for backend systems and IoT security.
- Experience with high-concurrency systems handling thousands of connected devices.
- Knowledge of AI technical routes, products, deployment, and training.
【Key Competencies】
- Scalability-Minded: Always thinking about performance, reliability, and future growth.
- System Thinker: Ability to understand complex system interactions and data flows.
- Problem Solver: Analytical approach to debugging and resolving production issues.
- Collaborative: Works effectively with frontend and mobile teams to deliver integrated solutions.
- Quality-Focused: Commitment to clean code, testing, and documentation.
- Continuous Learner: Stays updated on backend technologies and best practices.

【About the Role】
We are seeking a versatile Frontend Engineer to develop engaging user interfaces across Web and Mobile platforms for our Smart Campus and IoT solutions. This role encompasses responsive web applications (Vue.js), Progressive Web Apps (PWA) , and native/hybrid mobile apps (iOS/Android), with a strong emphasis on seamless integration with backend services and IoT devices.
You will collaborate closely with designers, product managers, backend engineers, and remote development teams to deliver high-performance, cross-platform user experiences that power our innovative solutions.
【Key Responsibilities】
1. Web Frontend Development (Vue.js)
- Develop responsive, interactive web applications using Vue.js (Vue2/Vue3) and its ecosystem (Vue Router, Pinia/Vuex, Element UI/Ant Design).
- Optimize frontend performance, ensuring fast loading times and smooth interactions.
- Implement reusable components and maintain consistent UI/UX across web platforms.
- Ensure cross-browser compatibility and responsive design for various screen sizes.
2. Progressive Web App (PWA) Development
- Design and implement PWA features including service workers, web app manifests, and offline capabilities.
- Enable offline-first experiences for field operations in Smart Campus environments.
- Implement background sync, push notifications, and cache strategies for reliable performance in low-connectivity scenarios.
- Optimize PWA for installability and native-like user experience on mobile devices.
3. Mobile App Development (iOS & Android)
- Develop and maintain native iOS (Swift) and Android (Kotlin/Java) applications, or leverage cross-platform frameworks (React Native/Flutter) for efficient delivery.
- Implement mobile-specific features: push notifications, offline storage, camera integration, GPS/location services, and Bluetooth connectivity (for IoT device pairing).
- Optimize mobile app performance, battery consumption, and memory usage.
- Ensure compatibility across different device models and OS versions.
4. Remote Team Coordination
- Collaborate effectively with remote development teams (across different time zones and locations) to ensure smooth project execution.
- Participate in daily stand-ups, sprint planning, and code reviews with distributed team members.
- Clearly document technical decisions, API contracts, and implementation details for remote team reference.
- Proactively communicate challenges, dependencies, and progress to remote stakeholders.
- Adapt communication style to bridge cultural and language differences with Mainland China or offshore teams.
5. IoT Integration & Real-Time Features
- Integrate frontend applications with IoT devices via WebSocket, MQTT, or RESTful APIs for real-time data updates.
- Implement data visualization dashboards for IoT telemetry (charts, maps, device status).
- Handle real-time events and notifications from IoT devices and backend systems.
- Ensure smooth user experience for controlling and monitoring connected devices.
6. Testing & Quality Assurance
- Write and maintain unit tests (Jest, Mocha) and end-to-end tests (Cypress, Playwright) for frontend applications.
- Conduct UI testing and ensure pixel-perfect implementation of designs.
- Test PWA features across different browsers and devices.
- Participate in code reviews to maintain code quality and standards.
7. Collaboration & Documentation
- Work closely with backend engineers to define API contracts and integrate with backend services.
- Collaborate with designers to translate Figma/Adobe XD prototypes into functional interfaces.
- Document frontend architecture, component libraries, and mobile app release processes.
- Create and maintain technical documentation for remote team reference.

【Qualifications & Requirements】
Education:
- Bachelor's degree or higher in Computer Science, Information Technology, Software Engineering, or a related field.
Must-Haves:
1. Work Experience
- Minimum 4+ years of frontend development experience, with at least 2 years focused on mobile app development.
- Proven PWA experience with deployed PWA projects in production environments.
- Experience collaborating with remote development teams (offshore, cross-border, or distributed teams).
- Experience delivering Hong Kong local projects is highly preferred.
- Portfolio of published web applications and mobile apps (App Store/Google Play links preferred).
2. Technical Skills
Web Frontend (Vue.js):
- Proficient in HTML5/CSS3/JavaScript (ES6+), with strong command of Vue.js (Vue2/Vue3) ecosystem.
- Experience with state management (Vuex/Pinia), routing (Vue Router), and UI frameworks (Element UI, Ant Design, Vuetify).
- Understanding of frontend build tools (Webpack, Vite) and package managers (npm/yarn).
- Familiarity with TypeScript is highly preferred.
PWA Expertise:
- Deep understanding of service workers: lifecycle, caching strategies (Cache First, Network First, Stale-While-Revalidate), and background sync.
- Experience with Web App Manifest configuration for installable PWAs.
- Knowledge of IndexedDB, Cache API, and local storage for offline data management.
- Familiarity with Workbox library for simplifying service worker implementation.
- Understanding of PWA performance metrics and Lighthouse audit optimization.
Mobile Development (Choose One Track):
Track A
- iOS: Proficiency in Swift and SwiftUI/UIKit, with experience in Xcode, CocoaPods, and App Store submission process.
- Android: Proficiency in Kotlin/Java, with experience in Android Studio, Gradle, and Google Play submission process, or
Track B
- Strong experience with React Native or Flutter, with ability to deliver high-quality apps for both iOS and Android from a single codebase.
- Understanding of bridge modules for native functionality integration.
Mobile-Specific Skills:
- Experience with mobile IoT integrations: Bluetooth/BLE, NFC, GPS, camera, QR code scanning.
- Experience with push notifications: APNS (iOS) and FCM (Android) integration.
- Knowledge of offline storage solutions (SQLite, Realm, AsyncStorage, MMKV).
- Understanding of mobile security best practices: data encryption, secure storage, certificate pinning.
Real-Time & IoT Integration:
- Experience with WebSocket for real-time bidirectional communication.
- Familiarity with MQTT protocol for IoT device messaging.
- Experience integrating with RESTful APIs and handling real-time data streams.
- Knowledge of data visualization libraries (ECharts, D3.js, Chart.js, Three.js for 3D visualization).
Testing:
- Experience with frontend testing frameworks (Jest, Jasmine, Mocha) and mobile testing tools (Appium, Detox, XCTest, Espresso).
3. Remote Collaboration Skills
- Experience working in distributed teams with clear asynchronous communication.
- Proficiency with collaboration tools: Slack, Microsoft Teams, Jira, Confluence, Figma.
- Ability to write clear, detailed technical documentation for remote team consumption.
- Strong written communication skills in English and Chinese for cross-border collaboration.
- Understanding of cultural nuances when working with Mainland China or international teams.
4. Language Requirements
- Cantonese: Fluent (must-have for local team collaboration and client interaction).
- Mandarin: Proficient (essential for communication with Mainland China remote teams).
- English: Working proficiency (able to read technical documentation and participate in international collaboration).
5. Preferred Qualifications
- Experience in Smart Parks, Smart Buildings, or IoT solutions.
- Experience with real-time data visualization dashboards for facility management or energy monitoring.
- Familiarity with MQTT, WebSocket, or other real-time communication protocols.
- Published PWAs and mobile apps on App Store/Google Play with positive user reviews.
- Experience with CI/CD pipelines for frontend and mobile app deployment (GitHub Actions, GitLab CI, Fastlane).
- Experience with agile/scrum methodologies in distributed team settings.
- Participation in Hackathons or rapid prototyping initiatives.
【Key Competencies】
- User-Centric: Passionate about creating intuitive, delightful user experiences across all platforms.
- PWA Champion: Deep understanding of progressive web technologies and their strategic value.
- Remote Collaborator: Skilled at building trust and maintaining effective communication with distributed team members.
- Adaptable: Comfortable switching between web, PWA, and mobile development contexts.
- Detail-Oriented: Meticulous about pixel-perfect implementation and cross-platform consistency.
- Problem Solver: Creative in finding solutions to platform-specific challenges and limitations.
- Documentation-Minded: Committed to clear documentation that enables remote team success.

【About the Role】
We are seeking a specialized Cyber Security Engineer to lead security initiatives across our Smart Campus, IoT, and Big Data platforms. This role is responsible for designing comprehensive software security architectures, conducting rigorous code reviews, performing security testing, and auditing vendor-supplied code to ensure end-to-end system protection.
You will work at the intersection of development and security, embedding security best practices throughout the software development lifecycle and safeguarding our innovative solutions against emerging cyber threats.

【Key Responsibilities】
1. Security Architecture & Solution Design
- Design and implement comprehensive security architectures for software systems in Smart Campus, IoT, and Big Data environments.
- Develop security blueprints, threat models, and risk mitigation strategies for complex, interconnected systems.
- Define security requirements and specifications for new features and platform enhancements.
- Conduct security risk assessments for existing and proposed systems, identifying vulnerabilities and recommending remediation measures.
2. Code Review & Security Testing
- Lead secure code reviews for both in-house developed and vendor-supplied code, identifying security flaws, logic errors, and compliance issues.
- Perform static application security testing (SAST) and dynamic application security testing (DAST) using industry-standard tools.
- Conduct penetration testing on web applications, mobile apps, APIs, and IoT devices to uncover vulnerabilities before deployment.
- Develop and maintain automated security testing pipelines integrated with CI/CD processes.
3. Vendor Code Audit & Third-Party Risk Management
- Audit and review code provided by external vendors and suppliers to ensure compliance with organizational security standards.
- Assess third-party components, libraries, and dependencies for known vulnerabilities and licensing risks.
- Establish security criteria for vendor selection and conduct security evaluations during procurement processes.
- Work with vendors to remediate identified security issues and validate fixes.
4. Security Governance & Compliance
- Develop and maintain security policies, standards, and guidelines specific to Smart Campus, IoT, and Big Data platforms.
- Ensure compliance with relevant industry standards and regulations (ISO 27001, NIST Cybersecurity Framework, PDPO, etc.).
- Support security audits and certification efforts, providing technical evidence and documentation.
- Stay abreast of emerging security threats, vulnerabilities, and attack vectors affecting IoT and connected systems.
5. Cyber Security
- Build and maintain the project's network security protection system, configure security devices such as firewalls, WAF, IDS/IPS, and VPN, optimize security policies, and prevent network attacks (e.g., DDoS, SQL injection, malicious intrusion, etc.).
- Be responsible for the security hardening of servers, operating systems (such as Windows Server, Linux, etc.), databases and application systems, conduct regular security vulnerability scans and penetration tests, issue vulnerability reports and promote the implementation of rectification.
6. Incident Response & Remediation
- Participate in security incident response, investigating breaches, analyzing root causes, and implementing corrective measures.
- Monitor security alerts and logs from various systems (SIEM, EDR, IoT platforms) to detect suspicious activities.
- Coordinate with development and operations teams to patch vulnerabilities and deploy security updates.

【Qualifications & Requirements】
Education:
- Bachelor's degree or higher in Computer Science, Information Security, Cybersecurity, Electrical Engineering, or a related field.
Must-Haves:
1. Work Experience
- Minimum 3+ years of experience in cyber security roles, with specific focus on application security, code review, and security architecture.
- Proven experience securing IoT systems, smart devices, or connected platforms is essential.
- Experience conducting vendor code audits and third-party security assessments.
2. Technical Skills
Security Architecture:
- Strong knowledge of security architecture principles, threat modeling (STRIDE, DREAD), and risk assessment methodologies.
- Experience designing security controls for distributed systems, cloud platforms (AWS/Azure/GCP), and edge computing environments.
- Familiarity with IoT security frameworks and standards (IEC 62443, EN 303645, NIST IR 8259).
Code Review & Testing:
- Proficiency in conducting manual and automated code reviews for multiple programming languages (Java, Python, JavaScript, C/C++).
- Hands-on experience with SAST/DAST tools (SonarQube, Checkmarx, Fortify, Burp Suite, OWASP ZAP).
- Penetration testing skills for web applications, mobile apps, APIs, and IoT firmware.
- Understanding of OWASP Top 10, SANS Top 25, and common vulnerability patterns.
DevSecOps:
- Experience integrating security tools into CI/CD pipelines (Jenkins, GitLab CI, GitHub Actions).
- Knowledge of container security (Docker, Kubernetes) and infrastructure-as-code security scanning.
Security Tools:
- Familiarity with SIEM, EDR/XDR, vulnerability scanners, and security monitoring platforms.
- Understanding of network security, encryption protocols (TLS/SSL), and identity/access management (IAM).
3. Language Requirements
- Cantonese: Fluent (must-have for team collaboration and local stakeholder communication).
- English: Proficient (able to read technical documentation and conduct professional communication).
- Mandarin: Working proficiency (advantageous for communication with Mainland China vendors and teams).
4. Preferred Certifications
- CISSP (Certified Information Systems Security Professional)
- CEH (Certified Ethical Hacker) / OSCP (Offensive Security Certified Professional)
- CISA (Certified Information Systems Auditor)
- GIAC certifications (GWEB, GWAPT, GICSP)
- AWS/Azure Security specialty certifications
- ISO 27001 Lead Implementer/Auditor
5. Industry Knowledge (Preferred)
- Experience in Smart Campus, Smart Building, or IoT solution development/deployment.
- Understanding of Big Data platform security (Hadoop, Spark, data lakes) and data privacy requirements.
- Familiarity with regulatory requirements in Hong Kong (PDPO) and cross-border data transfers.
- Knowledge of cryptography, PKI, and secure firmware update mechanisms for IoT devices.

【Key Competencies】
- Security-Minded: Deep commitment to protecting systems and data through proactive security measures.
- Analytical Thinker: Ability to dissect complex systems, identify vulnerabilities, and devise effective countermeasures.
- Detail-Oriented: Meticulous approach to code review, vulnerability assessment, and documentation.
- Collaborative: Works effectively with development teams, vendors, and stakeholders to embed security without hindering innovation.
- Continuous Learner: Stays updated on evolving cyber threats, attack techniques, and security technologies.
- Problem Solver: Calm and effective under pressure during security incidents and remediation efforts.