Senior Purple Team Penetration Tester | Tech Risk & Cyber

EY; Hong Kong; On-site; HKD 600,000 - 1,000,000; Full time

Job summary

EY is seeking a Senior Consultant in Hong Kong to join the Technology Risk and Cyber Team. You will perform technology compliance reviews, conduct penetration testing and offensive security assessments, and simulate cyber-attacks to guide clients in strengthening defenses.

The role involves evaluating IT architectures, responding to incidents, and ensuring regulatory compliance across financial services sectors.

Qualifications

• Bachelor’s or Master’s degree in Information Security, Information Systems, Computer Science, Engineering or related fields.
• 1–4 years of relevant experience in penetration testing, offensive security assessments, or Purple Team engagements.

Responsibilities

• Conduct Technology Compliance Reviews across banking, wealth and asset management, and insurance sectors in Hong Kong and beyond.
• IT Risk Assurance through independent audits of financial systems for integrity and compliance.
• Risk Analysis & Controls Evaluation including cloud security per regulatory requirements.
• Vulnerability Assessment & Penetration Testing to uncover security risks.
• Cyber-Attack Simulation to identify vulnerabilities and recommend improvements.
• IT System Architecture Review of architectures and configurations.
• Incident Response to manage security incidents and help clients recover.

Skills

Penetration testing

Offensive security

Purple Team engagements

Security frameworks

Cloud security

Incident response

Threat hunting

Malware analysis

EDR / SIEM / SOAR

Python / SQL

Education

Bachelor’s or Master’s in Information Security / Information Systems / Computer Science / Engineering

Tools

Burp Suite

Nmap

Metasploit

Nessus

Cobalt Strike

BloodHound

PowerShell

Job description

EY is seeking a Senior Consultant in Hong Kong to join the Technology Risk and Cyber Team. You will perform technology compliance reviews, conduct penetration testing and offensive security assessments, and simulate cyber-attacks to guide clients in strengthening defenses.

The role involves evaluating IT architectures, responding to incidents, and ensuring regulatory compliance across financial services sectors.