Full Description

Our client is seeking a Senior Penetration Testing Manager who provide strategic leadership and technical direction for a comprehensive penetration testing and red team service. This role is responsible for managing a team of highly skilled ethical hackers and overseeing a portfolio of security assessments designed to proactively identify and mitigate critical security vulnerabilities across a complex technology estate, including web and mobile applications, network infrastructure, cloud environments, and bespoke systems.

Key Responsibilities

Technical Leadership & Team Management Provides technical leadership, mentorship, and line management to a team of penetration testers and security consultants. Defines and maintains the technical methodology, standards, and quality assurance processes for all penetration testing and red team engagements. Manages resource allocation, project scheduling, and the end-to-end delivery of complex security assessment projects.

Service Delivery & Project Oversight Oversees the planning, scoping, and execution of sophisticated penetration tests, red team exercises, and advanced security simulations. Ensures the quality, accuracy, and business relevance of all security assessment reports and deliverables. Manages client relationships and stakeholder communication for high-profile engagements, presenting complex technical findings to both technical and executive audiences. Coordinates with internal technology and development teams to validate findings and advise on remediation strategies.

Strategy & Capability Development Drives the continuous evolution of the penetration testing service, incorporating new attack techniques, tools, and threat intelligence relevant to the Hong Kong and regional threat landscape. Develops and maintains a red teaming capability to simulate advanced persistent threat (APT) tactics, techniques, and procedures (TTPs). Contributes to the broader cybersecurity strategy by providing expert insights on offensive security controls and emerging threats.

Operational & Compliance Excellence Ensures all offensive security activities are conducted within a robust legal and ethical framework, with appropriate authorisation and oversight. Maintains awareness of relevant industry regulations and compliance requirements in Hong Kong.

Qualifications & Experience

Essential Requirements A bachelor's degree or higher in Computer Science, Information Security, or a related technical discipline. A minimum of 10 years of professional experience in information security, with at least 7 years in hands-on penetration testing and 3 years in a technical leadership or management role. Proven experience in managing a team of penetration testers and delivering a portfolio of security testing services.

Deep, practical expertise in multiple testing domains: web/mobile application security, network penetration testing, cloud security (AWS, Azure, GCP), and social engineering. Expert-level knowledge of offensive security tools (e.g., Metasploit, Burp Suite Pro, Cobalt Strike, Nmap), exploitation techniques, and post-exploitation methodologies. Extensive experience in scripting and automation for security testing (e.g., Python, Bash, PowerShell). Hold current, recognised industry certifications such as OSCP, OSCE, GPEN, or CREST Certified Tester.