Penetration Testing Engineer

China Mobile Hong Kong; Hong Kong; On-site; HKD 520,000 - 680,000; Full time

Benefits offered by this job

Discretionary Performance bonus

Life insurance

Medical insurance

Birthday gift

Marriage leave

Birthday leave

Job summary

CHINA MOBILE HONG KONG COMPANY LIMITED (CMHK) invites highly capable professionals to join its Cybersecurity Centre in Hong Kong. The role focuses on securing enterprise networks through rigorous penetration testing, red team activities, and ongoing security research.

You will research advanced attack techniques, develop tools, and perform offensive/defensive exercises at various levels, contributing to CMHK's mission of world-class cyber defense capabilities.

Qualifications

• Bachelor's degree or higher in CS/IT/security or related field.
• At least 3 years of penetration testing experience.
• Familiar with OWASP Top 10 vulnerabilities (and Mobile TOP 10).
• Able to conduct white-box code reviews independently.
• Proficient in at least one programming language and able to write code.
• Strong understanding of offensive/defensive techniques and related vulnerabilities.
• Self-motivated with good teamwork and research skills.
• Security certifications such as OSCP/OSWE/CISP-PTE are preferred.

Responsibilities

• Conduct security assessments of enterprise networks.
• Research cutting-edge attack techniques and develop attack tools.
• Perform penetration testing for large enterprises.
• Carry out red team assessments for large enterprises.
• Conduct offensive and defensive exercises at industry, provincial, and national levels.

Skills

Penetration testing

Programming

Code review

Security research

Team collaboration

Education

Bachelor's degree or higher (CS/IT/Security)

Tools

Penetration testing tools

Security testing frameworks

Job description

CHINA MOBILE HONG KONG COMPANY LIMITED ("CMHK") is the wholly-owned subsidiary of China Mobile Limited (HKEx: 941), which ranks 53rd on the Fortune Global 500.

Our company is dedicated to delivering an exceptional service experience and to become a world-class sci-tech service enterprise, focusing on its three principal businesses of communications services, computing services and AI services. Guided by this vision, we cultivate a culture of trust, responsibility, and care — creating an environment where people can thrive. At CMHK, we are committed to unlocking human potential and empowering every striver to achieve success. We now invite high-caliber professionals to join us on this journey.

Division: Cybersecurity Centre

In this position, you will:

• Responsible for conducting security assessments of enterprise networks.
• Responsible for researching cutting-edge attack techniques and developing attack tools.
• Responsible for penetration testing for large enterprises.
• Responsible for red team assessments for large enterprises.
• Responsible for conducting offensive and defensive exercises at industry, provincial, and national levels.

To be successful in this position, you should meet the following requirements:

• Bachelor's degree or higher, with a preference for majors in network security, computer science, information technology, or related fields;
• At least 3 years of penetration testing experience.
• Familiar with the principles of common security vulnerabilities and the causes and remediation of OWASP & Mobile TOP 10 vulnerabilities.
• Understanding of code security audits and the ability to independently conduct white-box code reviews.
• Proficient in various penetration testing tools and have an in-depth understanding of their principles, capable of independently completing various types of penetration tests.
• Proficient in at least one programming language and able to write code.
• Thorough understanding of common offensive and defensive techniques and the principles of related vulnerabilities (web security or binary).
• Strong interest in security and a strong ability to independently research, with good team spirit.
• Familiar with common system security mechanisms and possess some security development capabilities.
• Possession of network security-related certifications such as OSCP, OSWE, or CISP-PTE is preferred.

When you work:

• 5 days work
• 8 hours/day

What you enjoy:

• Discretionary Performance bonus
• Life insurance
• Medical insurance
• Birthday gift
• Marriage leave
• Birthday leave

CMHK is committed to be an equal opportunity employer. We offer exceptional benefits package and the opportunity to work in a challenging environment. Personal data provided by applicants will be treated strictly in accordance with our personal data policy and for recruitment purposes only.