About this role

Hong Kong, Hong Kong SAR, Hong Kong

Security Engineer – Offensive Security (1–3 YOE)

Job Description:

Company Overview

We are supporting an opportunity with a leading Asia-based financial services organization with a strong presence across global markets. The company operates in a high-performance, regulated environment supporting critical trading and enterprise platforms.

Role Summary

We are seeking a Security Engineer with 1–3 years of experience in offensive security, red teaming, or penetration testing. The role focuses on identifying vulnerabilities, simulating real-world attacks, and strengthening security controls across applications, infrastructure, and networks.

Key Responsibilities

Conduct penetration testing across web applications, APIs, networks, and internal systems
Perform vulnerability assessments and provide clear remediation recommendations
Support red team engagements and simulated attack scenarios
Identify security weaknesses across cloud and on-prem environments
Collaborate with engineering and infrastructure teams to improve security posture
Document findings, risk ratings, and mitigation steps
Assist in incident response and security investigations when required
Stay updated with emerging attack techniques, tools, and threat intelligence

Requirements

1–3 years of experience in offensive security, penetration testing, or red team operations
Strong understanding of OWASP Top 10 and common exploitation techniques
Hands-on experience with tools such as Burp Suite, Nmap, Metasploit, Wireshark, etc.
Good understanding of Linux systems and scripting (Python, Bash, or similar)
Knowledge of networking fundamentals and system architecture
Exposure to cloud platforms (AWS, Azure, or GCP) is a plus
Relevant certifications (CEH, OSCP, eJPT) are an advantage but not mandatory
Strong analytical, problem-solving, and communication skills

Required Skills

Security