The hiring company is looking for Offensive Security Solutions Lead for the inhouse security team.
Key Responsibilities:
Our specialist consultant Wendy will get in touch with you soon, if we find your profile suitable for this position or any other vacancies we are recruiting for.
Key Responsibilities:
- Lead a High-Performing Team: Act as a technical lead for a small team of offensive security engineers, providing mentorship, task prioritization, and technical oversight.
- Execute Threat-Led Emulations: Convert active financial-sector threat intelligence into realistic adversary emulation scenarios targeting core payment infrastructure.
- Apply Industry Frameworks: Map and track all testing operations against the MITRE ATT&CK framework to systematically identify and measure defensive detection gaps.
- Secure Payment Applications: Oversee and conduct deep-dive web, mobile, and API security assessments utilizing OWASP methodologies across transaction engines and digital wallets.
- Drive Remediation Solutions: Partner directly with payment engineering and DevOps teams to architect, review, and validate code-level and infrastructure-level fixes.
- Champion Purple Teaming: Collaborate closely with the Blue Team (SOC and Detection Engineering) to translate red team tactics into resilient telemetry and detection rules.
- Minimum more than 7 years in offensive security, penetration testing, or red teaming, or security
- Hands-on experience securing high-availability environments, fintech applications, or financial microservices.
- Expert-level knowledge of the MITRE ATT&CK matrix and OWASP Top 10 / API Security Top 10 methodologies.
- Proven capability to interpret cyber threat intelligence and translate TTPs into custom exploit strings or emulation plans.
- Proficiency in scripting/programming (Python, Go, or Java) and attacking cloud-native architectures (AWS, GCP, or Azure).
- Exceptional ability to translate complex exploit mechanics into actionable, business-oriented risk recommendations for non-security teams.
- Highly valued certifications include OSCP, OSEP, or CRTO (Certified Red Team Operator).
- Proficient in Chinese and English
Our specialist consultant Wendy will get in touch with you soon, if we find your profile suitable for this position or any other vacancies we are recruiting for.
Référence JN -072026-2004960
À PROPOS DE CETTE ENTREPRISE
Hong Kong
Morgan McKinley has been successfully connecting talented candidates with career opportunities for over 30 years. It’s in our DNA to Go Beyond – above...
Plus d'offres de Morgan McKinley
Morgan McKinley
Hong Kong
Morgan McKinley
Hong Kong
Morgan McKinley
Hong Kong
Morgan McKinley
Hong Kong
Morgan McKinley
Hong Kong
Morgan McKinley
Hong Kong
Morgan McKinley
Hong Kong
Morgan McKinley
Hong Kong
Morgan McKinley
Hong Kong
Donnez un nouvel élan à votre carrière
Trouvez des milliers d'opportunités emploi en vous inscrivant sur eFinancialCareers dès aujourd'hui.Offres recommandées
Bank Of China (Hong Kong) Limited
Hong Kong