Job Description - Offensive Security Solutions Lead (Perm, Inhouse)
The hiring company is looking for Offensive Security Solutions Lead for the inhouse security team.
Key Responsibilities:
Lead a High-Performing Team: Act as a technical lead for a small team of offensive security engineers, providing mentorship, task prioritization, and technical oversight.
Execute Threat-Led Emulations: Convert active financial-sector threat intelligence into realistic adversary emulation scenarios targeting core payment infrastructure.
Apply Industry Frameworks: Map and track all testing operations against the MITRE ATT&CK framework to systematically identify and measure defensive detection gaps.
Secure Payment Applications: Oversee and conduct deep-dive web, mobile, and API security assessments utilizing OWASP methodologies across transaction engines and digital wallets.
Drive Remediation Solutions: Partner directly with payment engineering and DevOps teams to architect, review, and validate code-level and infrastructure-level fixes.
Champion Purple Teaming: Collaborate closely with the Blue Team (SOC and Detection Engineering) to translate red team tactics into resilient telemetry and detection rules.
Requirements:
Minimum more than 7 years in offensive security, penetration testing, or red teaming, or security
Hands-on experience securing high-availability environments, fintech applications, or financial microservices.
Expert-level knowledge of the MITRE ATT&CK matrix and OWASP Top 10 / API Security Top 10 methodologies.
Proven capability to interpret cyber threat intelligence and translate TTPs into custom exploit strings or emulation plans.
Proficiency in scripting/programming (Python, Go, or Java) and attacking cloud-native architectures (AWS, GCP, or Azure).
Exceptional ability to translate complex exploit mechanics into actionable, business-oriented risk recommendations for non-security teams.
Highly valued certifications include OSCP, OSEP, or CRTO (Certified Red Team Operator).
Proficient in Chinese and English
Application
Our specialist consultant Wendy will get in touch with you soon, if we find your profile suitable for this position or any other vacancies we are recruiting for.
All Job Ads are subject to GrabJobs’s Terms of Service. We allow users to flag postings that may be in violation of those terms. Job Ads may also be flagged by GrabJobs moderation team. However, no moderation system is perfect, and flagging a posting does not ensure that it will be removed.
Be the first to receive the latest Others Full-Time Jobs in Hong Kong.
Setup your job alert:
By activating job alerts, I agree to GrabJobs Terms & Privacy Policy. I can unsubscribe to job alerts anytime.
Skip
GrabJobs is the no1 job portal in Hong Kong, connecting you to thousands of jobs fast!
Find the best jobs in Hong Kong, apply in 1 click and get a job today!