Consultant/ Senior Consultant

Consultant/ Senior Consultant (Penetration Testing) - Cyber - Hong Kong Contribute/lead to attack and penetration testing engagements to identify security weaknesses within client's business environments, report on issues and make remediation recommendations. Position as a subject matter expert to help support and mentor other team members. Respond to client requests, anticipate client needs, and suggest solutions using innovative approaches. Involve in all aspects of security and vulnerability management engagements which include but are not limited to: Network and host vulnerability assessments and penetration testing Web application vulnerability assessments and penetration testing Source code security reviews assisted by automated tools Exploit research and development skills are a plus Social engineering and physical penetration testing against facilities and sites are a plus Firewalls, IDS / IPS, and other security device configuration review are a plus During your tenure with us, you will demonstrate and develop your leadership and professional capabilities in the following areas: Inspiring, Creating purpose, Driving agility, Building diverse capability, Influencing, Collaborating, Delivering value, Building the business, Analytical acumen, Effective communication, Engagement management/delivery excellence, Managing change, Managing quality & risk, Sales excellence, Strategic thinking and problem solving, and Tech savviness. We are looking for someone with Bachelor's degree or above in computer science, information and communication technology, information systems, risk management or other related disciplines. Holder of the following qualification preferred: Offensive Security Certified Professional (OSCP) or other Penetration Testing related certifications. At least 1 year of experience in penetration testing, vulnerability assessment or other types of security assessments. Hands‑on experience in web applications penetration testing. Ability to understand and assess applications from both technical and business perspectives, and to explain technical vulnerabilities in terms of business risks. Subject matter expertise in one or more of the following: Networking: LAN, WAN, MPLS, VPN, Load Balancers/ Reverse Proxies, and other networking technologies Web applications Application vulnerability assessment Mainframe systems Malware development and red teaming Perform penetration testing, particularly on novel devices and environments innovatively and analytically. Capable of working to strict deadlines and prioritizing work appropriately. Able to develop scripts or code to automate testing and develop bespoke attacks. Ability to work well independently and be comfortable leading a team within client engagements. Shape your future through impact that matters For more than 100 years of history, Deloitte witnessed also had the honor to be part of the economic boom in China by providing industry‑leading audit & assurance, consulting, risk advisory, financial advisory, tax & business advisory services to nearly 90% of the Fortune Global 500 Chinese companies and thousands of private companies. Deloitte China today carries on our centenary professionalism and strives to become the undisputed leader in professional services in China with strong responsibility and capabilities in digitalization and multidisciplinary services. All qualified applicants will receive consideration for employment regardless of their background, experience, identity, ability or thinking style, and if you need assistance during the application process for accessibility reasons this is available upon request. The preferred candidate will be subject to background screening by Deloitte China or by their external third‑party provider. Ready to take on new challenges? Apply nowStay connected for the latest career opportunities, follow us on Deloitte China Social Media. #J-18808-Ljbffr