Cybersecurity Consultant (Vendor, Up to 60K)

TalentQuest HR Limited; Hong Kong; On-site; HKD 609,000 - 730,000; Full time

Job summary

TalentQuest HR Limited in Hong Kong is seeking a Cybersecurity Consultant to directly deliver hands-on cybersecurity engagements such as penetration testing, VAPT, and security assessments across web, API, network, and cloud environments. You will produce professional client-ready reports and present findings to both technical and executive audiences in English and Chinese.

The role emphasizes client requirement gathering, scoping, remediation advisory, and end-to-end delivery.

Qualifications

• 3+ years of direct, hands-on experience in penetration testing, VAPT, offensive security, red teaming, or cybersecurity consulting.
• Fluent Cantonese with professional working fluency in English or Mandarin.
• Must hold existing legal authorization to work in Hong Kong.
• Experience serving Hong Kong government bodies, financial institutions, public sector entities, or large enterprises is highly regarded.

Responsibilities

• Hands-on delivery of cybersecurity engagements including deep-dive testing, VAPT, and infrastructure reviews.
• Independent technical analysis and high-impact reporting to clients and executives.
• Lead client scoping, requirements gathering, and lifecycle engagement throughout projects.
• Articulate findings, guide remediation, and verify risk closure with clients.

Skills

Penetration testing

VAPT

Offensive security

Cybersecurity consulting

Client-facing communications

Report writing

Job description

Cybersecurity Consultant (Vendor, Up to 60K)

Hands-on Project Delivery: Directly perform hands-on cybersecurity service engagements, including deep-dive penetration testing, VAPT, Web and API security assessments, infrastructure assessments, vulnerability scanning, and baseline configuration reviews.

Technical Analysis & High-Impact Reporting: Independently conduct offensive security testing, uncover complex vulnerability chains and attack paths, evaluate real-world business impacts, and draft professional, client-ready technical and executive summary reports.

Client Requirement Gathering & Lifecycle Engagement:

Actively engage with customer technical and management teams during scoping to thoroughly discover, elicit, and define client-specific security objectives, test boundaries, and operational constraints.

Drive direct customer interactions throughout project kickoff, status syncs, technical debriefs, executive presentations, and project sign-off.

Remediation Advisory & Hands-on Verification: Articulate technical findings and risk exposures clearly to clients, guide their technical personnel through remediation steps, track remediation progress, and perform hands-on verification testing to ensure risk closure.

Scoping & Pre-sales Collaboration: Partner with sales and account teams on technical discussions, help analyze customer pain points, estimate delivery efforts, and structure customized Scopes of Work (SOW) during pre-sales stages.

Delivery Excellence & Quality Assurance: Maintain meticulous standards regarding evidence collection, technical documentation, project milestones, and professional service quality to ensure top-tier client experience.

Hands-on Experience: 3+ years of direct, hands-on experience in penetration testing, VAPT, offensive security, red teaming, or cybersecurity consulting.

Technical Proficiency: Proven track record in conducting hands-on assessments across diverse platforms, such as Web applications, APIs, network infrastructure, Active Directory, cloud, or container environments.

Exceptional verbal and written communication skills with proven ability to elicit, understand, and clarify client business and security requirements.

Adept at bridging the gap between technical teams and non-technical management, facilitating consensus, and resolving delivery roadblocks.

Autonomous Execution: Capable of driving security engagements end-to-end independently, with demonstrated excellence in generating structured, client-facing technical deliverables in both English and Chinese.

Language Proficiency: Fluent Cantonese is mandatory. Professional working fluency in English or Mandarin is also required.

Work Authorization & Industry Background: Must hold existing legal authorization to work in Hong Kong. Prior delivery experience serving Hong Kong government bodies, financial institutions (FSI), public sector entities, or large enterprises is highly regarded.

• Which of the following statements best describes your right to work in Hong Kong?
• What's your expected monthly basic salary?
• How many years' experience do you have as Cyber Security Consultant?