Senior OT Security Penetration Testing Lead

CLP; Hong Kong; On-site; HKD 900,000 - 1,300,000; Full time

Job summary

CLP in Hong Kong seeks a Senior Manager Operational Technology (OT) Penetration Testing to lead and uplift the OT Technical Assurance & Penetration Testing team in HK. The role conducts OT security testing across PLC/SCADA, HMI/SCADA, and related devices, develops test plans, manages engagements, and reports findings to senior leadership.

You will align with HK regulations and ISA/IEC 62443 standards, leverage tools like Wireshark and Zeek, and mentor engineers to strengthen cyber resilience

Qualifications

• 6+ years in cybersecurity with security assessment and testing.
• 4+ years OT penetration testing in production/pre-production IC S systems.
• Independent management of penetration testing projects (planning, scoping, QA).
• Excellent written and verbal communication for technical and executive audiences.

Responsibilities

• Lead OT penetration testing on PLC/SCADA and related devices.
• Define engagement rules, test plans, test windows, and rollback plans.
• Coordinate with control room, plant ops, IT/OT engineers, and vendors to avoid disruption.
• Prepare clear, actionable reports for technical and non-technical stakeholders.
• Harbor and share knowledge on OT security threats and mitigations.
• Work with teams to prioritize vulnerabilities and drive remediation.

Skills

OT penetration testing

Cybersecurity leadership

Project management

Communication

Lab/digital twin testing

Education

Bachelor's degree in Computer Science / IT

Tools

Wireshark ICs dissectors

Zeek on SPAN/TAP

Python scripting

PowerShell scripting

Job description

CLP in Hong Kong seeks a Senior Manager Operational Technology (OT) Penetration Testing to lead and uplift the OT Technical Assurance & Penetration Testing team in HK. The role conducts OT security testing across PLC/SCADA, HMI/SCADA, and related devices, develops test plans, manages engagements, and reports findings to senior leadership.

You will align with HK regulations and ISA/IEC 62443 standards, leverage tools like Wireshark and Zeek, and mentor engineers to strengthen cyber resilience