- Our client is a leading corporate and investment banking group, providing institutional investors with insights, liquidity, and capital execution across global markets. Headquartered in Hong Kong, the firm is renowned for its world-class research, asset management, and corporate finance services. Operating in a highly regulated and fast-paced financial ecosystem, the organisation prioritises cutting-edge technology and robust cyber security defense infrastructure to protect global assets and institutional client data.
about the job.
- Scope, plan, and deliver manual penetration tests on enterprise systems, commercial network infrastructures, and mobile applications to identify potential vulnerabilities.
- Execute specialized security assessments focused specifically on mobile application environments and their underlying integrations.
- Deliver detailed technical reports outlining exploit paths, business risk analysis, and actionable remediation strategies for internal engineering teams.
- Keep abreast of the latest threat intelligence, zero-day vulnerabilities, and offensive security methodologies to uplift the organization's overall defense posture.
skills & experiences required.
- Minimum 2 years of professional IT experience directly related to IT security.
- Hands-on experience in delivering IT projects focused on manual penetration tests for systems featuring mobile applications.
- Exceptional problem-solving abilities with a proven track record of thinking like an attacker to secure complex environments.
- Hold at least one (1) recognized cybersecurity certification such as OSCP, OSCE, CREST, GIAC, etc.
- Good command of spoken and written English and Chinese to articulate technical risks effectively to diverse corporate stakeholders.
If you are interested in this role, please click 'Apply Now' or send your CV directly to russell.regalado@randstad.com.hk