Senior Penetration Tester & Red Team Specialist

EY; Hong Kong; On-site; HKD 900,000 - 1,200,000; Full time

Job summary

EY's Cyber Security team in Hong Kong invites you to join as a Senior/Manager focusing on penetration testing, red teaming and offensive security. You will work on client engagements to identify vulnerabilities, assess cyber risks and strengthen security posture across diverse environments.

You'll gain hands-on experience in web app, network and wireless testing, perform security assessments and simulate real-world cyber-attacks, while collaborating with project managers and senior professionals

Qualifications

• 2+ years of relevant experience in penetration testing, vulnerability assessment, red teaming or related technical areas.
• Hands-on exposure to web application, network and wireless security testing.
• Certifications such as CISSP, OSCP, OSEP, OSWE, OSED, OSWP or equivalent are highly regarded but not mandatory.
• Strong analytical skills and a curiosity to understand how systems and technologies work.
• Good written Chinese and English, with fluent spoken Cantonese and English.

Responsibilities

• IT Security & Architecture Review: Review IT system architecture, configurations and security controls to identify vulnerabilities and areas for improvement.
• Vulnerability Assessment: Conduct vulnerability scanning and security assessments across applications, systems, networks and infrastructure.
• Penetration Testing: Perform penetration testing across web applications, networks, wireless environments and other technology platforms.
• Red Teaming & Cyber-Attack Simulation: Simulate real-world cyber-attacks to assess prevention, detection and response capabilities.
• Security Analysis & Reporting: Analyze findings and provide remediation recommendations to strengthen cybersecurity posture.

Skills

Penetration testing

Vulnerability assessment

Red teaming

Cybersecurity assessment

Offensive security

Job description

EY's Cyber Security team in Hong Kong invites you to join as a Senior/Manager focusing on penetration testing, red teaming and offensive security. You will work on client engagements to identify vulnerabilities, assess cyber risks and strengthen security posture across diverse environments.

You'll gain hands-on experience in web app, network and wireless testing, perform security assessments and simulate real-world cyber-attacks, while collaborating with project managers and senior professionals