Cybersecurity Consultant – Penetration Testing & VAPT

Cybersecurity Consultant – Penetration Testing & VAPT Location: Hong Kong Employment Type: Full-time Workplace Type: On-site Role Overview We are looking for a Cybersecurity Consultant to deliver hands-on cybersecurity services for customers in Hong Kong. The role focuses on frontline security project delivery, including penetration testing, VAPT, security assessments, technical reporting, remediation validation, and customer communication. Job Responsibilities 1. Deliver cybersecurity service projects including penetration testing, VAPT, web and API security assessments, infrastructure security assessments, vulnerability scanning, and configuration reviews. 2. Independently perform security testing, analyze vulnerabilities and attack paths, assess business impact, and produce professional client-facing penetration testing and security assessment reports. 3. Communicate findings and remediation recommendations clearly to customers, follow up on remediation progress, and perform verification testing when required. 4. Work directly with customer technical and management teams throughout project kickoff, execution, reporting, presentation, and project closure. 5. Maintain high standards of delivery quality, documentation, evidence collection, project timelines, and customer experience. 6. Support project scoping, technical discussions, effort estimation, and pre-sales activities when required. Qualifications 1. 3+ years of hands-on experience in penetration testing, VAPT, security assessment, offensive security, or cybersecurity consulting. 2. Strong practical experience in penetration testing across areas such as Web applications, APIs, networks, infrastructure, cloud environments, or internal systems. 3. Able to independently conduct security assessments and produce clear, professional, client-ready technical reports in English or Chinese. 4. Fluent Cantonese is required. Professional fluency in either English or Mandarin is also required. 5. Strong customer communication, problem-solving, project execution, and documentation skills. 6. Must have the existing legal right to work in Hong Kong. Experience serving Hong Kong government, financial institutions, public organizations, technology companies, or large enterprises is preferred. Preferred • Knowledge of Hong Kong cybersecurity and privacy requirements such as S17, G3, ISPG-SM01, PDPO, or PCPD guidelines. • OSCP, CREST, CEH, CISSP, CISA, CISM, or other relevant cybersecurity certifications. • Experience with red teaming, cloud security, AI security, or advanced security assessments.