Red Team Manager

CLP; Hong Kong; On-site; HKD 900,000 - 1,300,000; Full time

Job summary

CLP in Hong Kong is seeking a senior Red Team Manager to scope and execute offensive security campaigns, aligning with enterprise security objectives. The role focuses on testing CLP’s cyber detective and protective controls, developing new tools, and delivering actionable reports to leadership.

The ideal candidate will bring 6–7 years of Red Team experience, strong AD and cloud security knowledge, and certifications such as OSCP and CRTO. This is a permanent, on-site role at Kai Tak, Kowloon.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• 6-7 years of experience in scoping and executing Red Team exercises, penetration tests, and security tests.
• Independent management experience covering penetration testing projects, including project planning, scoping, and quality assurance.
• In-depth understanding of attacker TTPs (tactics, techniques, and procedures).
• Strong understanding of network security, web app security, API security, cloud security, and mobile app security.
• Experience performing EDR evasion and bespoke tool development.
• Experience reviewing Windows Active Directory security and cloud environments.
• Knowledge of scripting languages such as Python, C/C++, .NET, or PowerShell.
• Good command of spoken and written English; ability to explain technical issues to non-technical stakeholders.
• Ability to work collaboratively with cross-functional teams; self-motivated and proactive.
• Independent research experience performing vulnerability research and exploitation is a plus.
• Willingness to learn and adapt to evolving technologies.
• Holding OSCP/OSCE/OSEP/OSCE3 certifications is required.
• Holding Red Team certifications (CRTO/CRTE/PACES) is required.

Responsibilities

• Assist to develop and execute a program of offensive campaigns (Red Team exercises).
• Drive innovative thinking by researching, creating and testing new tools to identify vulnerabilities.
• Provide detailed reports with insights to support security fixes and training.
• Perform quality assurance of Red Team and penetration testing reports.
• Develop and execute custom scripts to automate testing procedures.
• Work with development teams to prioritize and remediate identified vulnerabilities.
• Stay current with emerging threats and share knowledge with security teams.
• Provide regular reports and assist with technical presentations for senior leadership.

Skills

Red Team operations

Penetration testing

EDR evasion

Threat hunting

Python

PowerShell

C/C++

Cloud security

Network security

Education

Bachelor's degree in Computer Science/Information Technology

Tools

Windows Active Directory

Cloud platforms

Job description

Working Location: Kai Tak, Kowloon, Hong Kong
Employment Duration: Permanent
The Red Team Manager is responsible for identifying and exploiting vulnerabilities in computer systems, applications, and networks. This role will work closely with various internal teams and security personnel to ensure that proper security measures are implemented throughout the organisation.
The primary focus of this role will be to help scope and perform Red Team exercises.
As such, it is expected that the successful candidate will possess Red Team skills and relevant experience.

Key Responsibilities

• Assist to develop and execute a program of offensive campaigns (Red Team exercises) to test CLP’s cyber detective and protective controls.
• Drive innovative thinking by researching, creating and testing new tools and techniques to identify vulnerabilities in the people, processes and technologies that CLP use.
• Provide CLP with detailed reports that contain the necessary insight to support security fixes, patches, remediation, and training to ensure the same opportunities for exploitation do not exist in the future.
• Perform quality assurance of technical reports (both Red Team and penetration testing reports).
• Develop and execute custom scripts to automate and streamline testing procedures.
• Work with development teams and security personnel to help prioritize and remediate identified vulnerabilities.
• Stay current with emerging security threats, vulnerabilities, and share knowledge with other security team members.
• Provide regular reports and assist with creating technical presentations for senior leadership.

Qualifications & Experience

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• 6-7 years of experience in scoping and executing Red Team exercises, penetration tests, and security tests.
• Independent management experience covering penetration testing projects, including project planning, scoping, and quality assurance.
• In-depth understanding of attacker TTPs (tactics, techniques, and procedures) and how these apply to Red Team exercises.
• Strong understanding of network security, web application security, API security, cloud security, and mobile application security.
• Experience performing EDR evasion, bespoke tool development, and associated research.
• Experience reviewing Windows Active Directory security and cloud environments.
• Knowledge of scripting languages such as Python, C/C++, .NET, or PowerShell.
• Good command of spoken and written English.
• Ability to explain technical issues to non-technical stakeholders.
• Ability to work collaboratively with cross-functional teams.
• Exhibit a high level of self-motivation and drive to achieve personal and team goals.
• Actively shares technical knowledge and insights with team members to foster a collaborative environment.
• Independent research experience performing vulnerability research and exploitation is a plus.
• Embrace new ideas, approaches, and be willing to learn and adapt to evolving technologies.
• Holding a relevant penetration testing certification such as OSCP, OSCE, OSEP, or OSCE3 is required.
• Holding a Red Team certification (such as CRTO/CRTE/PACES) is required.

About Clp

CLP was founded in Hong Kong in 1901, at a time when electricity was still a novelty worldwide. Today we power millions of homes and businesses across the Asia-Pacific region with over 8,000 employees.In Hong Kong, we operate a vertically integrated electricity business providing a highly reliable supply of electricity to over 80% of the city’s population. Outside Hong Kong, we invest in the energy sector on the Chinese Mainland, in Australia, India, Taiwan Region and Thailand. Our business spans the electricity value chain ranging from power generation, transmission and distribution to retail and smart energy services. We have a diversified portfolio of generating assets that uses a wide range of fuels sources including nuclear, renewables, gas and coal. To meet the evolving needs of energy users in a world being reshaped by decarbonisation and digitalisation, we strive to embrace new opportunities and expand our horizons as we fulfil our purpose to Power Brighter Tomorrows.