Manager, Information Security (Red Team)

Octopus Holdings Limited • Full Time • Hong Kong, Hong Kong • 1w ago

Job Responsibilities:

Build, lead and manage an internal cybersecurity red-team function, including planning and executing penetration testing and threat simulation exercises
Design and execute red-team initiatives, collaborate with stakeholders to define objectives, scope, and success criteria
Test and validate the effectiveness of security controls by using red-team approach
Review and analyze Endpoint Detection & Response alerts to identify potential breaches, suspicious activities, and advanced attack attempts
Conduct compromise assessments to identify signs of prior or ongoing unauthorized access to improve detection capabilities and validate security posture
Coordinate purple team exercises and work closely with blue team and other security functions to improve detection and response capabilities through these exercises
Provide detailed reports and executive-level presentations on findings, risk impact, and remediation recommendations
Stay ahead of emerging attack techniques, tools, and threat actor behaviors to enhance testing methodologies
Mentor and guide team members, fostering a culture of continuous improvement and technical excellence
Keep abreast of the latest technologies such as cloud computing and mobile devices, and the corresponding security challenges as well as controls

Requirements:

Degree holder in Information Security, IT, Computer Science or other related disciplines
Minimum 6 years of work experience in IT security or equivalent with at least 3 years in offensive security or red teaming
Proven experience in offensive security and red teaming including but not limited to penetration testing, exploit development, and adversary simulation
Strong knowledge of attack techniques across network, application, cloud, and endpoint environments
Familiar with frameworks such as MITRE ATT&CK, OWASP, and threat intelligence integration
Hands-on experience with tools such as Cobalt Strike, Metasploit, Burp Suite, and custom attack frameworks
Knowledgeable in social engineering, physical security and threat simulation
Knowledgeable in TCP/IP, Linux/UNIX System Administration, and Windows System Administration
Knowledge of Database Administration, Network Security, Mobile Technology, Cloud Security, Application Security, Active Directory Security and Virtualization Technology
Knowledge of Core Java / C / C++ / Python is preferred
Experience in security auditing for identifying weakness is preferred
Experience in cybercrime and cybersecurity incident investigation is preferred
Familiar with information security standards such as ISO27001 and HKMA C-RAF is a plus
Good problem solving and trouble shooting skills
Effective communication and interpersonal skills
Able to work under pressure, self-motivated and good team player
Passionate about technology and cyber security
Holder of offensive security certificates such as CEH, OSCP, OSCE, OSEP, GPEN, CREST CRT
Holder of other security certificates such as CISA, CISM, CISSP, CISP is preferred

We offer successful candidate an attractive remuneration package and excellent career prospects. Interested parties please send your resume, present and expected salary, contact details and quoting the reference number by clicking "Apply"

Visit our web site: http://www.octopus.com.hk/

The personal data collected will be used for recruitment purposes only. If you are not contacted by us within six weeks, you may consider your application unsuccessful. Personal data with an unsuccessful applicant will be destroyed 12 months after rejection of the application. During this retention period, you have the right to request for correction or destruction of your personal data at any time. Any request for the correction or destruction of personal data should be addressed in writing to our Human Resources & Administration Department.

Octopus is an equal opportunity employer and all employment decisions and Human Resources policies are administered; especially those relating to recruitment & selection, compensation & benefits, promotion & transfer, training & development and termination & redundancy; without discrimination on the basis of age, race, colour, religion, sex, national origin, marital status, pregnancy, physical and mental disability and family status but on genuine occupational qualification, job performance, employees’ ability and internal/ external relativities.

__________________________________________________________________________________________________________________________

行業 Industry

資訊科技 Information Technology

工作種類 Job Category

資訊科技 (保安專員 / 風險管理) IT (Security Specialist / Risk Management)
資訊科技 (其他) IT (Others)
其他 (其他) Others (Others)

工作地點 Location

荃灣 Tsuen Wan

經驗要求 Experience

5 年或以上 / years or above

學歷要求 Education

學士 Bachelor

Similar Jobs

Senior Security Product Specialist

Hays • Full Time • HongKong, HongKong, Hong Kong • 1d ago

Information Technology Full Time

Your new company Our client is a well-established telecom and technology services provider with a strong presence in the region. Your new role Lead the development, enhancement, and life cycle management of cybersecurity...

1d ago

Apply

System Administrator (M365 / Power Platform, $25-30K)

CL Technical Services Limited • Full Time • Sha Tin, Hong Kong, HK • HK$ 25,000 - HK$ 30,000 / month • 1d ago

Information Technology Full Time

5 Days work Listed company Good working environment Job Duties: Manage and configure Power Apps, Power Automate, Power BI, and Dataverse environments. Implement governance policies, security roles, and data loss preventi...

1d ago

Apply

IT Support Engineer- Banking 35-45k

Michael Page • Full Time • Quarry Bay, Hong Kong, HK • HK$ 420,000 - HK$ 540,000 / year • 1d ago

Information Technology Full Time

Work - Life balance platform. A good place to develop your IT support skills. About Our Client Our client is a large organization in the financial services industry, renowned for its commitment to innovation and excellen...

1d ago

Apply

Project Manager (Listed company, over $50K)

CL Technical Services Limited • Full Time • Wong Tai Sin District, Hong Kong, HK • HK$ 50,000 - HK$ 70,000 / month • 1d ago

Information Technology Full Time

5 Days work Listed company Good working environment Job Requirements: Manage end-to-end delivery of IS/IT digital solutions projects (e.g. mobile application implementation, platform/technical upgrade, etc) across a typ...

1d ago

Apply

Java Programmer / Software Developer ($33K - $48K)

CL Technical Services Limited • Full Time • Hong Kong, Hong Kong, HK • HK$ 38,000 - HK$ 48,000 / month • 1d ago

Information Technology Full Time

Key Responsibilities Design and develop innovative web application systems that meet organizational needs. Build and integrate system interfaces to ensure seamless communication between departmental platforms. Translate...

1d ago

Apply

Technician / Assistant Technician 技術人員 / 助理技術人員

VL Automation Ltd • Full Time • Chek Lap Kok, Hong Kong, HK • 1d ago

Information Technology Full Time

工作地點 – 香港國際機場電氣、電機、樓宇管理系統輪班工作負責維護資料採集與監控系統 (SCADA) 的日常運作資料採集與監控設備的維修及安裝為系統升級工作提供支援工作地點 – 香港國際機場 (或按需要於不同地點工作) 為人盡責, 好...

1d ago

Apply

Software Developer (J2EE, Java, Multiple vacancies)

CL Technical Services Limited • Full Time • North Point, Hong Kong, HK • HK$ 30,000 - HK$ 45,000 / month • 1d ago

Information Technology Full Time

Few vacancies 5 days work Good working environment Job Description: To provide implementation services for new enhancements in C&ED (i.e. conduct SA&D, prepare program specification, conduct system test and user...

1d ago

Apply

SVP/ VP, Cybersecurity & Governance

Michael Page • Full Time • Central And Western District, Hong Kong, HK • 1d ago

Information Technology Full Time

The role of SVP/ VP, Cybersecurity & Governance involves formulating and maintaining a set of IT security standards and procedures to protect critical financial systems and data. This position requires expertise in t...

1d ago

Apply

Analyst Programmer / Senior Programmer (C#.net, Large-scale project)

CL Technical Services Limited • Full Time • Wong Tai Sin District, Hong Kong, HK • HK$ 25,000 - HK$ 29,999 / month • 1d ago

Information Technology .NET Programmer Full Time

5 days work with stable working environment Inhouse project Competitive pay Job Duties: Assist in-house application system development life cycle activities including programming, testing, implementation and related syst...

1d ago

Apply

Senior Network Engineer 30-40K

Michael Page • Full Time • Central And Western District, Hong Kong, HK • 1d ago

Information Technology IT Full Time

We are seeking a highly skilled Senior Network Engineer to design, implement, and maintain network solutions for a growing organization in the Technology & Telecoms industry. This temporary role in Kowloon offers an...

1d ago

Apply