Senior Cyber Security Red Team Associate (Risk & Resilience)

About the role

Join EY's elite Cybersecurity Team as a Senior Associate focused on Risk & Resilience. You will work alongside top talent to defend against cyber threats, simulate real‑world attacks, and strengthen client security postures.

Key responsibilities

• Review and analyse IT system architecture and configurations.
• Conduct vulnerability scans and penetration tests to uncover security gaps.
• Simulate cyber‑attack scenarios to identify weaknesses and provide remediation recommendations.

Required profile

• 1–2 years of experience in penetration testing and red‑team activities.
• Familiarity with tools for wireless, web‑application, and network security testing.
• Relevant offensive‑security certifications (e.g., OSEP, OSWP, OSCP) are a plus.
• Proficiency in written Chinese and English, with fluent oral Cantonese and English.
• Enthusiasm for learning and staying current with emerging technologies.

Required skills

• Penetration testing
• Red teaming
• Vulnerability scanning
• Wireless security testing
• Web application security testing
• Network security testing

What we offer

• Broad development platform with large‑scale projects.
• Regular professional training and support for certifications.
• Competitive salary, comprehensive insurance, paid annual leave.
• Inclusive, innovative team culture encouraging collaboration.