Cyber Security - Penetration Test - Senior/ Manager - Hong Kong

EY; Hong Kong; On-site; HKD 900,000 - 1,200,000; Full time

Job summary

EY's Cyber Security team in Hong Kong invites you to join as a Senior/Manager focusing on penetration testing, red teaming and offensive security. You will work on client engagements to identify vulnerabilities, assess cyber risks and strengthen security posture across diverse environments.

You'll gain hands-on experience in web app, network and wireless testing, perform security assessments and simulate real-world cyber-attacks, while collaborating with project managers and senior professionals

Qualifications

• 2+ years of relevant experience in penetration testing, vulnerability assessment, red teaming or related technical areas.
• Hands-on exposure to web application, network and wireless security testing.
• Certifications such as CISSP, OSCP, OSEP, OSWE, OSED, OSWP or equivalent are highly regarded but not mandatory.
• Strong analytical skills and a curiosity to understand how systems and technologies work.
• Good written Chinese and English, with fluent spoken Cantonese and English.

Responsibilities

• IT Security & Architecture Review: Review IT system architecture, configurations and security controls to identify vulnerabilities and areas for improvement.
• Vulnerability Assessment: Conduct vulnerability scanning and security assessments across applications, systems, networks and infrastructure.
• Penetration Testing: Perform penetration testing across web applications, networks, wireless environments and other technology platforms.
• Red Teaming & Cyber-Attack Simulation: Simulate real-world cyber-attacks to assess prevention, detection and response capabilities.
• Security Analysis & Reporting: Analyze findings and provide remediation recommendations to strengthen cybersecurity posture.

Skills

Penetration testing

Vulnerability assessment

Red teaming

Cybersecurity assessment

Offensive security

Job description

Cyber Security - Penetration Test - Senior/ Manager - Hong Kong

Join EY’s Cybersecurity team and build your career in offensive security, penetration testing and red teaming. As a Consultant, you will work with experienced cybersecurity professionals on client engagements to identify vulnerabilities, assess cyber risks and strengthen security resilience.

You will gain hands-on exposure to real-world cybersecurity challenges, including penetration testing, vulnerability assessments, security architecture reviews and cyber-attack simulations across different technology environments.

Job Description

Under the guidance of project managers and experienced cybersecurity professionals, you will perform one or more of the following:

IT Security & Architecture Review: Review IT system architecture, configurations and security controls to identify potential vulnerabilities and areas for improvement.

Vulnerability Assessment: Conduct vulnerability scanning and security assessments across applications, systems, networks and infrastructure.

Penetration Testing: Perform penetration testing across web applications, networks, wireless environments and other technology platforms to identify and validate security vulnerabilities.

Red Teaming & Cyber-Attack Simulation: Simulate real-world cyber-attacks and adversarial techniques to assess clients’ ability to prevent, detect and respond to cyber threats.

Security Analysis & Reporting: Analyze findings, assess potential security impact and provide practical remediation recommendations to strengthen clients’ cybersecurity posture.

Continuous Learning: Stay current with emerging cyber threats, vulnerabilities, attack techniques and offensive security tools.

Capability Requirements

Experience: 2+ years of relevant experience in penetration testing, vulnerability assessment, red teaming, cybersecurity assessment or other related technical areas is preferred.

Technical Skills: Hands‑on exposure to tools and techniques used for web application, network and/or wireless security testing.

Cybersecurity Knowledge: Understanding of common vulnerabilities, attack techniques, security controls and cybersecurity concepts.

Certifications: Cybersecurity and offensive security certifications such as CISSP, OSCP, OSEP, OSWE, OSED, OSWP or equivalent qualifications are highly regarded but not mandatory.

Analytical Skills: Strong analytical, problem‑solving and troubleshooting capabilities, with a curiosity to understand how systems and technologies work.

Languages: Good written Chinese and English, with fluent spoken Cantonese and English.

We will provide training to help you develop in this field, as long as you have enthusiasm for learning and staying updated with new technologies.

What EY Offers

Diverse Project Exposure: Work on cybersecurity engagements across different clients, industries and technology environments.

Hands‑on Development: Build practical experience in penetration testing, security assessments, red teaming and other cybersecurity disciplines.

Professional Training: Access structured learning opportunities and support for relevant cybersecurity certifications.

Career Development: Develop both technical and consulting capabilities alongside experienced cybersecurity professionals.

Collaborative Environment: Be part of an open and inclusive team that encourages knowledge sharing, innovation and continuous learning.

EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.

Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.

EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi‑disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.

EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.

Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.

EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi‑disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.