Senior Cybersecurity Consultant - Red/Purple Team Specialist

LPS; Hong Kong; Presencial; HKD 800 000 - 1 200 000; Tempo integral

Resumo da oferta

Lenovo is seeking an experienced cyber security professional to perform red/purple team exercises and advanced penetration testing, helping strengthen IT controls across systems, apps, and networks. You will support risk assessments and remediation efforts in a fast-paced environment.

The role emphasizes collaboration with internal teams and external partners, while aligning with HK policies and industry best practices for ongoing security improvements.

Qualificações

• Bachelor's or Master's degree in Cybersecurity, Computer Science, Software Engineering, or related fields.
• 5+ years of hands-on experience in red/purple team exercises, penetration testing, and DevSecOps.
• 1+ year of hands-on experience conducting Hong Kong SRAA engagements, including security risk assessment, vulnerability assessment, and penetration testing aligned with the HKSAR Baseline IT Security Policy and G3 Practice Guide.
• Hands-on experience in manual penetration testing across web applications, APIs, and mobile applications.
• Sound knowledge in Information Security, Business Continuity, Project Management, Application Security and industry best practices.
• Holder of one or more of the following certifications is a plus: CISSP, CISA, AAIA, CISM, CISP, OSCP, GPEN, CEH, CRTP, and CRT.

Responsabilidades

• Conduct comprehensive risk and control assessments to identify, evaluate, monitor, and mitigate risks across IT systems, applications, and network operations.
• Conduct red/purple team operation and penetration testing to identify vulnerabilities and assess the effectiveness of security controls.
• Implement remediations based on test findings to strengthen the security posture.
• Support security teams in defining, assessing, and managing security operations through appropriate policies, procedures, and control frameworks.
• Proactively evaluate IT control processes and activities to ensure the control environment is effectively designed and functioning.
• Facilitate audit and security control reviews with internal teams and external parties, prioritizing and mitigating risks to acceptable levels.
• Enhance security measures such as threat detection, attack penetration, and mitigation based on current and emerging threats.
• Promote communication and collaboration between internal teams and external parties on risk and cybersecurity matters.

Conhecimentos

Red/Purple Team

Penetration Testing

DevSecOps

Security Operations

Risk Assessment

Formação académica

Bachelor's/Master's in Cybersecurity/CS/SWE

Descrição da oferta de emprego

Lenovo is seeking an experienced cyber security professional to perform red/purple team exercises and advanced penetration testing, helping strengthen IT controls across systems, apps, and networks. You will support risk assessments and remediation efforts in a fast-paced environment.

The role emphasizes collaboration with internal teams and external partners, while aligning with HK policies and industry best practices for ongoing security improvements.