Red Team Lead - Offensive Security & Assessments

CLP; Hong Kong; On-site; HKD 900,000 - 1,300,000; Full time

Job summary

CLP in Hong Kong is seeking a senior Red Team Manager to scope and execute offensive security campaigns, aligning with enterprise security objectives. The role focuses on testing CLP’s cyber detective and protective controls, developing new tools, and delivering actionable reports to leadership.

The ideal candidate will bring 6–7 years of Red Team experience, strong AD and cloud security knowledge, and certifications such as OSCP and CRTO. This is a permanent, on-site role at Kai Tak, Kowloon.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• 6-7 years of experience in scoping and executing Red Team exercises, penetration tests, and security tests.
• Independent management experience covering penetration testing projects, including project planning, scoping, and quality assurance.
• In-depth understanding of attacker TTPs (tactics, techniques, and procedures).
• Strong understanding of network security, web app security, API security, cloud security, and mobile app security.
• Experience performing EDR evasion and bespoke tool development.
• Experience reviewing Windows Active Directory security and cloud environments.
• Knowledge of scripting languages such as Python, C/C++, .NET, or PowerShell.
• Good command of spoken and written English; ability to explain technical issues to non-technical stakeholders.
• Ability to work collaboratively with cross-functional teams; self-motivated and proactive.
• Independent research experience performing vulnerability research and exploitation is a plus.
• Willingness to learn and adapt to evolving technologies.
• Holding OSCP/OSCE/OSEP/OSCE3 certifications is required.
• Holding Red Team certifications (CRTO/CRTE/PACES) is required.

Responsibilities

• Assist to develop and execute a program of offensive campaigns (Red Team exercises).
• Drive innovative thinking by researching, creating and testing new tools to identify vulnerabilities.
• Provide detailed reports with insights to support security fixes and training.
• Perform quality assurance of Red Team and penetration testing reports.
• Develop and execute custom scripts to automate testing procedures.
• Work with development teams to prioritize and remediate identified vulnerabilities.
• Stay current with emerging threats and share knowledge with security teams.
• Provide regular reports and assist with technical presentations for senior leadership.

Skills

Red Team operations

Penetration testing

EDR evasion

Threat hunting

Python

PowerShell

C/C++

Cloud security

Network security

Education

Bachelor's degree in Computer Science/Information Technology

Tools

Windows Active Directory

Cloud platforms

Job description

CLP in Hong Kong is seeking a senior Red Team Manager to scope and execute offensive security campaigns, aligning with enterprise security objectives. The role focuses on testing CLP’s cyber detective and protective controls, developing new tools, and delivering actionable reports to leadership.

The ideal candidate will bring 6–7 years of Red Team experience, strong AD and cloud security knowledge, and certifications such as OSCP and CRTO. This is a permanent, on-site role at Kai Tak, Kowloon.