Senior Cyber Security Pen Testing Lead

EY; Hong Kong; On-site; HKD 840,000 - 1,200,000; Full time

Benefits offered by this job

Exposure to leading clients

Professional development

Fast career progression

Flexible work options

Job summary

EY in Hong Kong is seeking a Consultant/Senior Consultant for Cyber Security - Penetration Testing in the Financial Services sector. You will lead engagements, perform vulnerability assessments on web/mobile apps, APIs and networks, and guide junior colleagues through complex testing activities.

You will collaborate with clients to explain findings, draft reports, and help implement remediation, while staying current with evolving threats and tools.

Qualifications

• College degree or equivalent with minimum 5 years' related experience in penetration testing.
• Mandatory Certification - OSCP, CREST, GPEN or equivalent.
• Proven skills and knowledge in penetration testing and red teaming experiences and strong track records of projects delivered.
• Experience using VSPT and red teaming tools like Nessus, AppScan, Accunetix, Burpsuite Pro, WebInspect; familiarity with DREAD and CVSS.
• Proficiency in written and oral English communication; Cantonese is an advantage.

Responsibilities

• Lead a team to perform vulnerability scanning and penetration testing of web applications, mobile applications (Android and iOS), web services, API, network, thick client etc.
• Prepare and review testing reports and findings tracker sheets based on the provided template
• Lead a team to perform intelligence-led cyber attack simulation and run red teaming operations
• Communicate with customer stakeholders to explain and demonstrate vulnerabilities, and govern the mitigation of the identified vulnerabilities
• Research the latest security best practices and stay abreast of new threats and vulnerabilities
• Coach / mentor junior team members on VSPT and related knowledge and skills
• Participate in a fast-paced delivery in challenging projects of other cyber security domains
• Involve in customer relationship management, project management and team management
• Candidates with less experience will be considered as Senior Associate

Skills

Penetration testing

Red teaming

English communication

Cantonese advantage

Education

Bachelor's degree or equivalent

Tools

Nessus

AppScan

Accunetix

BurpSuite Pro

WebInspect

Job description

EY in Hong Kong is seeking a Consultant/Senior Consultant for Cyber Security - Penetration Testing in the Financial Services sector. You will lead engagements, perform vulnerability assessments on web/mobile apps, APIs and networks, and guide junior colleagues through complex testing activities.

You will collaborate with clients to explain findings, draft reports, and help implement remediation, while staying current with evolving threats and tools.