Manager, Information Security (Red Team)

Octopus Holdings Limited • Full Time • Hong Kong, Hong Kong • 2w ago

Job Responsibilities:

Build, lead and manage an internal cybersecurity red-team function, including planning and executing penetration testing and threat simulation exercises
Design and execute red-team initiatives, collaborate with stakeholders to define objectives, scope, and success criteria
Test and validate the effectiveness of security controls by using red-team approach
Review and analyze Endpoint Detection & Response alerts to identify potential breaches, suspicious activities, and advanced attack attempts
Conduct compromise assessments to identify signs of prior or ongoing unauthorized access to improve detection capabilities and validate security posture
Coordinate purple team exercises and work closely with blue team and other security functions to improve detection and response capabilities through these exercises
Provide detailed reports and executive-level presentations on findings, risk impact, and remediation recommendations
Stay ahead of emerging attack techniques, tools, and threat actor behaviors to enhance testing methodologies
Mentor and guide team members, fostering a culture of continuous improvement and technical excellence
Keep abreast of the latest technologies such as cloud computing and mobile devices, and the corresponding security challenges as well as controls

Requirements:

Degree holder in Information Security, IT, Computer Science or other related disciplines
Minimum 6 years of work experience in IT security or equivalent with at least 3 years in offensive security or red teaming
Proven experience in offensive security and red teaming including but not limited to penetration testing, exploit development, and adversary simulation
Strong knowledge of attack techniques across network, application, cloud, and endpoint environments
Familiar with frameworks such as MITRE ATT&CK, OWASP, and threat intelligence integration
Hands-on experience with tools such as Cobalt Strike, Metasploit, Burp Suite, and custom attack frameworks
Knowledgeable in social engineering, physical security and threat simulation
Knowledgeable in TCP/IP, Linux/UNIX System Administration, and Windows System Administration
Knowledge of Database Administration, Network Security, Mobile Technology, Cloud Security, Application Security, Active Directory Security and Virtualization Technology
Knowledge of Core Java / C / C++ / Python is preferred
Experience in security auditing for identifying weakness is preferred
Experience in cybercrime and cybersecurity incident investigation is preferred
Familiar with information security standards such as ISO27001 and HKMA C-RAF is a plus
Good problem solving and trouble shooting skills
Effective communication and interpersonal skills
Able to work under pressure, self-motivated and good team player
Passionate about technology and cyber security
Holder of offensive security certificates such as CEH, OSCP, OSCE, OSEP, GPEN, CREST CRT
Holder of other security certificates such as CISA, CISM, CISSP, CISP is preferred

We offer successful candidate an attractive remuneration package and excellent career prospects. Interested parties please send your resume, present and expected salary, contact details and quoting the reference number by clicking "Apply"

Visit our web site: http://www.octopus.com.hk/

The personal data collected will be used for recruitment purposes only. If you are not contacted by us within six weeks, you may consider your application unsuccessful. Personal data with an unsuccessful applicant will be destroyed 12 months after rejection of the application. During this retention period, you have the right to request for correction or destruction of your personal data at any time. Any request for the correction or destruction of personal data should be addressed in writing to our Human Resources & Administration Department.

Octopus is an equal opportunity employer and all employment decisions and Human Resources policies are administered; especially those relating to recruitment & selection, compensation & benefits, promotion & transfer, training & development and termination & redundancy; without discrimination on the basis of age, race, colour, religion, sex, national origin, marital status, pregnancy, physical and mental disability and family status but on genuine occupational qualification, job performance, employees’ ability and internal/ external relativities.

__________________________________________________________________________________________________________________________

行業 Industry

資訊科技 Information Technology

工作種類 Job Category

資訊科技 (保安專員 / 風險管理) IT (Security Specialist / Risk Management)
資訊科技 (其他) IT (Others)
其他 (其他) Others (Others)

工作地點 Location

荃灣 Tsuen Wan

經驗要求 Experience

5 年或以上 / years or above

學歷要求 Education

學士 Bachelor

Similar Jobs

IT Support Engineer- Banking 35-45k

Michael Page • Full Time • Quarry Bay, Hong Kong, HK • HK$ 420,000 - HK$ 540,000 / year • 14h ago

Information Technology IT Banking Full Time

Work - Life balance platform. A good place to develop your IT support skills. About Our Client Our client is a large organization in the financial services industry, renowned for its commitment to innovation and excellen...

14h ago

Apply

IT Infrastructure Specialist (Windows & Linux)- Banking

Michael Page • Full Time • Hong Kong, Hong Kong, HK • HK$ 420,000 - HK$ 540,000 / year • 1d ago

Information Technology IT Banking Full Time

Gain exposure to global investment banking operations Opportunity to work on diverse IT infrastructure projects About Our Client Our client is a well-established company in the Financial Services industry, operating as p...

1d ago

Apply

IT Project Manager (Infrastructure)

Michael Page • Full Time • Hong Kong, Hong Kong, HK • HK$ 600,000 - HK$ 720,000 / year • 1d ago

Information Technology Project Management IT Full Time

Lead major IT infrastructure programs across multiple North America sites Drive end‑to‑end transformation initiatives with high ownership About Our Client Our client is a well-established, mid-sized organization in the T...

1d ago

Apply

IT Security specialist

Michael Page • Full Time • Hong Kong, Hong Kong, HK • HK$ 540,000 - HK$ 816,000 / year • 1d ago

Information Technology IT Risk Management Full Time

Work with cutting-edge cybersecurity technologies and frameworks Opportunity for career growth in a dynamic IT environment About Our Client Our client a large organization in the financial services industry, known for it...

1d ago

Apply

Java Programmer (J2EE, Oracle RDBMS, Over $40K)

CL Technical Services Limited • Full Time • Hong Kong, Hong Kong • from HK$ 40,000 / month • 2d ago

Information Technology Java Programmer Full Time

Job description: Deliver implementation services for new enhancements, including activities such as conducting systems analysis and design, preparing program specifications, performing system testing and user acceptance...

2d ago

Apply

IT Manager (MPF/ Pension)- Insurance

Michael Page • Full Time • Hong Kong, Hong Kong, HK • HK$ 600,000 - HK$ 780,000 / year • 2d ago

Information Technology Project Management IT Full Time

Lead impactful IT enhancement projects Collaborate with business stakeholders and drive technology improvements About Our Client Our Client is a large organization within the insurance industry, renowned for its innovati...

2d ago

Apply

Services Sales Consultant (IT Vendor) @1.2 million

Michael Page • Full Time • Hong Kong, Hong Kong, HK • HK$ 1,080,000 - HK$ 1,320,000 / year • 2d ago

Information Technology Business Development Full Time Sales Executive

IT Vendor, High-Impact Growth Opportunity Attractive Compensation & Career Progression About Our Client Our client is a global technology leader with a strong focus on delivering hybrid cloud, infrastructure, managed...

2d ago

Apply

Deputy Head of Risk and Audit, IT | Hong Kong, HK | In-Office

CITIC CLSA • Full Time • Hong Kong, Hong Kong, HK • 3d ago

Information Technology Compliance Risk Management Full Time

Position Description Responsible for the governance, risk management, and audit coordination frameworks across the global IT function. This role ensures effective identification, assessment, monitoring, and remediation o...

3d ago

Apply

IT Support (Banking)

Michael Page • Full Time • Hong Kong, Hong Kong, HK • HK$ 30,000 - HK$ 40,000 / year • 3d ago

Information Technology IT Banking Full Time

Work with a reputable global investment banking group Gain hands-on exposure across server, network & end-user support About Our Client Our client is a well-established organization in the Financial Services sector,...

3d ago

Apply

IT Project Coordinator 25-30K

Michael Page • Full Time • Hong Kong, Hong Kong, HK • HK$ 300,000 - HK$ 360,000 / year • 3d ago

Information Technology Project Management Administration Full Time

Exposure to regional IT projects across Asia Pacific Strong brand with structured project management environment About Our Client Our client is a reputable organization within the FMCG industry. The company is a large or...

3d ago

Apply