Security Consultant (SC) – Security Audit & Penetration Testing
Description
About the role
We are looking for a highly skilled, multi-certified Security Consultant (Category 2+) to drive security audits, cloud security evaluations, and hands-on manual web penetration testing. You will be responsible for audit methodology oversight, vulnerability verification, and report authorization.
Key responsibilities
Perform comprehensive IT security risk assessments, security audits, and cloud security reviews.
Conduct and validate manual web penetration testing, PoC exploit generation, and business logic security evaluations.
Formulate technical audit reports, vulnerability remediation guidance, and re-test verification.
About you
Minimum 4 years of general IT experience.
At least 2 years of experience in IT security risk assessment and audit services within the past 10 years.
Completed at least 1 reference project in IT security risk assessment & audit as a Security Consultant within the past 5 years.
Successfully conducted manual web penetration testing in at least 3 projects of similar penetration testing areas within the past 3 years.
Must concurrently hold valid certifications across all 4 domains: Domain 1 (General IT Security): CISP, CISM (CNITSEC), CISSP (ISC2), CISA (ISACA), CISM (ISACA), ISO/IEC 27001 Lead Auditor, or GIAC GSE (SANS).
Domain 2 (IT Security Audit): CISP (CNITSEC), CISSP (ISC2), or CISA (ISACA).
Domain 3 (Cloud Security): CCSP (ISC2), CCSK (CSA), or CCAK (CSA & ISACA).
Domain 4 (Hands-on Penetration Testing): Must hold a valid professional certificate explicitly containing the keywords "ethical hacking", "offensive security", or "penetration testing" in the certificate title (e.g., OSCP, CEH, GPEN, PenTest+).
We offer a competitive remuneration package to the right candidate. Interested parties please send your full resume with present and expected salary by email to recruit@neos-gp.com.hk
(We are an Equal Opportunity Employer and personal data collected would be used for recruitment purpose only.)