OT Security Lead — Penetration Testing & Resilience

CLP; Hong Kong; On-site; HKD 900,000 - 1,300,000; Full time

Job summary

CLP is seeking a Senior Manager of Operational Technology Penetration Testing to lead and uplift the OT Technical Assurance & Penetration Testing team in Hong Kong. You will manage engagements across OT assets, define safe testing windows, and collaborate with control room and engineering teams to minimise disruption while delivering clear findings to leadership.

The role requires 6+ years in cybersecurity with 4+ years OT pentesting, strong knowledge of OT stacks and protocols, and hands-on

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or related field
• At least 6 years of cybersecurity experience including security assessment and penetration testing
• At least 4 years of OT penetration testing experience across production or pre-production IC systems
• Independent management experience covering penetration testing projects, planning, scoping, QA
• Strong understanding of OT stack and IC protocols in critical infrastructure contexts

Responsibilities

• Lead penetration testing and vulnerability assessments on OT systems (PLCs, SCADA, HMI, IEDs)
• Define safe rules of engagement, test plans, windows, and rollback procedures
• Coordinate with control room, plant operations, IT/OT teams and vendors to avoid disruption
• Prepare clear, actionable reports for technical and non-technical stakeholders
• Stay current with OT security threats and share knowledge with the team

Skills

OT pentest

Vulnerability assessment

Python

PowerShell

Wireshark

Zeek

MITRE ATT&CK IC

Active Directory

Lab testing

Strong communication

Education

Bachelor's degree in Computer Science or IT

Tools

Wireshark

Zeek

PowerShell

Python

Job description

CLP is seeking a Senior Manager of Operational Technology Penetration Testing to lead and uplift the OT Technical Assurance & Penetration Testing team in Hong Kong. You will manage engagements across OT assets, define safe testing windows, and collaborate with control room and engineering teams to minimise disruption while delivering clear findings to leadership.

The role requires 6+ years in cybersecurity with 4+ years OT pentesting, strong knowledge of OT stacks and protocols, and hands-on