Job Responsibiities:

• Execute red team initiatives, including adversary simulation, penetration testing, and exploit development, under the guidance of the red-team leader
• Test and validate the effectiveness of security controls by using red-team approach
• Review and analyze Endpoint Detection & Response alerts to identify potential breaches, suspicious activities, and advanced attack attempts
• Conduct compromise assessments to identify signs of prior or ongoing unauthorized access to improve detection capabilities and validate security posture
• Participate in purple team exercises and work closely with blue team and other security functions to improve detection and response capabilities through these exercises
• Document findings and provide detailed technical reports with actionable remediation recommendations
• Stay ahead of emerging attack techniques, tools, and threat actor behaviors to enhance testing methodologies
• Keep abreast of the latest technologies such as cloud computing and mobile devices, and the corresponding security challenges as well as controls

Job Requirements:

• Bachelor degree in Computer Science or relevant disciplines, cyber secruity stream is preferrable
• Minimum 2 years of work experience in IT security or equivalent with at hands-on in offensive security or red teaming such as penetration testing and vulnerability assessment
• Strong understanding of attack techniques across network, application, and endpoint environments
• Familiar with frameworks such as MITRE ATT&CK, OWASP
• Knowledgeable in TCP/IP, Linux/UNIX System Administration, and Windows System Administration
• Knowledge of Database Administration, Network Security, Mobile Technology, Cloud Security, Application Security, Active Directory Security and Virtualization Technology is preferred
• Knowledge of Core Java / C / C++ / Python is preferred
• Familiar with information security standards such as ISO27001 and HKMA C-RAF is a plus

We offer successful candidate an attractive remuneration package and excellent career prospects. Interested parties please send your resume, present and expected salary, contact details and quoting the reference number by clicking "Apply"

Visit our web site: http://www.octopus.com.hk/

The personal data collected will be used for recruitment purposes only. If you are not contacted by us within six weeks, you may consider your application unsuccessful. Personal data with an unsuccessful applicant will be destroyed 12 months after rejection of the application. During this retention period, you have the right to request for correction or destruction of your personal data at any time. Any request for the correction or destruction of personal data should be addressed in writing to our Human Resources & Administration Department.

Octopus is an equal opportunity employer and all employment decisions and Human Resources policies are administered; especially those relating to recruitment & selection, compensation & benefits, promotion & transfer, training & development and termination & redundancy; without discrimination on the basis of age, race, colour, religion, sex, national origin, marital status, pregnancy, physical and mental disability and family status but on genuine occupational qualification, job performance, employees’ ability and internal/ external relativities.