Senior Security Consultant

   Hi Partner, 

 

We are sourcing a role Senior Security Consultant, Total Package(including agency fee) 63K HKD/month , contract period 1 year.

 

Working location Level 2, The Long Beach Commercial Podium, 8 Hoi Fai Road, Kowloon, Hong Kong.

 

Please pass the CVs via email also when you upload in the system: Lenovo | JobPostingDetail

 

Remark: While the ideal candidate may have more experience, we are willing to consider candidates with 3-5 years of experience if they can clearly demonstrate the essential skills and capabilities for the role, along with reasonable salary expectations.

 

 

Duties 

• Conduct comprehensive risk and control assessments to identify, evaluate, monitor, and mitigate risks across IT systems, applications, and network operations. 

• Conduct red/purple team operation and penetration testing to identify vulnerabilities and assess the effectiveness of security controls. 

• Implement remediations based on test findings to strengthen the security posture. 

• Support security teams in defining, assessing, and managing security operations through appropriate policies, procedures, and control frameworks. 

• Proactively evaluate IT control processes and activities to ensure the control environment is effectively designed and functioning. 

• Facilitate audit and security control reviews with internal teams and external parties, prioritizing and mitigating risks to acceptable levels. 

• Enhance security measures such as threat detection, attack penetration, and mitigation based on current and emerging threats. 

• Promote communication and collaboration between internal teams and external parties on risk and cybersecurity matters. 

Requirements 

• Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Software Engineering, or related fields. 

• 5+ years of hands-on experience in red/purple team exercises, penetration testing, and DevSecOps. 

• 1+ year of hands-on experience conducting Hong Kong SRAA engagements, including security risk assessment, vulnerability assessment, and penetration testing aligned with the HKSAR Baseline IT Security Policy and G3 Practice Guide. 

• Hands-on experience in manual penetration testing across web applications, APIs, and mobile applications. 

• Sound knowledge in Information Security, Business Continuity, Project Management, Application Security and industry best practices. 

• Holder of one or more of the following certifications is a plus: CISSP, CISA, AAIA, CISM, CISP, OSCP, GPEN, CEH, CRTP, and CRT.