Junior IT Security Engineer

Key Responsibilities:

1. Perform penetration testing (web, mobile, network, API) and vulnerability assessments.
2. Execute red/purple team exercises and controlled phishing/social engineering campaigns.
3. Conduct source code review and security configuration assessments (cloud/server/network).
4. Review architecture of cloud and on-premise environments.
5. Document findings, provide remediation recommendations, and assist in methodology improvement.

Qualifications:

1. 1–3 years experience in penetration testing, red teaming, or vulnerability assessment.
2. Bachelor's degree in CS, IT, or Cybersecurity.
3. At least one offensive certification: OSCP, OSWP, OSEP, GPEN, GWAPT, CREST, or eCPPT.
4. Scripting/programming: Python, Bash, or PowerShell.
5. Solid networking knowledge (TCP/IP, SSL/TLS, load balancers).
6. Strong report writing and communication skills.
7. Languages: Fluent English (written/spoken). Fluent Cantonese or Mandarin (spoken). Written Chinese preferred.