Senior Cyber Risk & Red Team Consultant

Ambition; Hong Kong; On-site; HKD 900,000 - 1,300,000; Full time

Job summary

Ambition in Hong Kong seeks a hands-on Senior Cybersecurity Consultant to lead Red Team and risk assessment engagements across infrastructure, cloud and networks, identifying vulnerabilities and recommending practical mitigations. You will partner with stakeholders to drive effective remediation.

Ideal candidates have 5+ years in Red/Purple Team, penetration testing, and DevSecOps, plus experience with SRAA/HKSAR guidelines, governance, and secure software practices.

Qualifications

• Bachelor's or Master's degree in Cybersecurity, Computer Science, Software Engineering, Information Technology, or a related discipline.
• Minimum 5 years of hands-on cybersecurity experience with a strong focus on Red Team operations, Purple Team exercises, penetration testing, and DevSecOps practices.
• Proven experience delivering Hong Kong Security Risk Assessment and Audit (SRAA) engagements, including SRA, VA, and PT, aligned with HKSAR Baseline IT Security Policy and G3 Security Guidelines.
• Demonstrable expertise in manual penetration testing of web applications, APIs, mobile platforms, and modern application architectures.
• Solid understanding of information security governance, business continuity management, secure software development, project delivery methodologies, and industry security frameworks.
• Relevant industry certifications (CISSP, CISA, CISM, OSCP, GPEN, CEH, etc.) highly desirable.
• Strong analytical abilities, stakeholder management skills, and the capability to communicate complex security risks to technical and non-technical audiences.

Responsibilities

• Lead end-to-end cybersecurity risk assessments across infrastructure, applications, cloud, and networks.
• Execute Red Team and Purple Team engagements to emulate threats and validate defenses.
• Drive remediation initiatives by partnering with technical stakeholders.
• Advise on development and governance of cybersecurity policies, standards, and procedures.
• Assess design and operational effectiveness of IT security controls for compliance.
• Coordinate internal and external audits, security reviews, and risk treatment activities.
• Strengthen cyber defense through evaluation of threats, techniques, detection, and response.
• Act as trusted advisor to business and technology stakeholders, promoting security awareness.

Skills

Red Team

Purple Team

Penetration Testing

DevSecOps

Governance & Compliance

Communication

Education

Bachelor's or Master's degree in Cybersecurity/CS/IT/related

Job description

Ambition in Hong Kong seeks a hands-on Senior Cybersecurity Consultant to lead Red Team and risk assessment engagements across infrastructure, cloud and networks, identifying vulnerabilities and recommending practical mitigations. You will partner with stakeholders to drive effective remediation.

Ideal candidates have 5+ years in Red/Purple Team, penetration testing, and DevSecOps, plus experience with SRAA/HKSAR guidelines, governance, and secure software practices.