Responsibilities:
Leading and conducting application/server/network/middleware/Cloud security configuration assessment
Leading and performing vulnerability assessment on different platforms and technologies
Leading and performing web and mobile, thick client, infrastructure, and wireless network penetration tests
Leading and emulating/simulating Adversary TTPs using red teaming techniques
Leading and conducting source code review to identify any potential coding vulnerability (using either manual or automated processes)
Remain up-to-date on the latest cybersecurity threats, vulnerabilities and regulatory requirements
Strong experience in offensive security tools (such as Mimikatz, Burp) and defensive security tools (such as SIEM, NDR, EDR)
To present risk management options to the business
To support the development of appropriate documentation to inform risk management decisions, ensuring these are expressed in terms meaningful to all the stakeholders including both IT and business
To assess and provide threat-driven defense solutions against evolving threat landscape

Requirements:
Degree Holder in Computer Science, IT Management, Engineering or equivalent
Minimum eight years of work experience in Information Technology or Engineering industry
At least seven years of client facing working experience
At least seven years of demonstrable experience in any of the following: security configuration assessment, vulnerability assessment, cloud technical security assessment, penetration testing and adversary emulation/simulation
Familiar with security technologies, e.g. NGFW, IDS/IPS, EDR, SIEM, etc
Ability to work independently and under pressure
Strong analytical, problem solving and inter-personal skills that can deliver result
Excellent communication skills in both written and oral English and Chinese
Willing to travel overseas on some projects
Related qualifications and/or industry certifications such as CRT, OSCP/GPEN, OSWE/GWAPT, OSCE3/GXPN/CCSAS/CCSAM are a must CISSP, CISM and other Cloud certifications is a plus

Join our dynamic Cyber Digital Solutions team at Thales, where innovation meets purpose. As a leader in cutting-edge technology, we're not just shaping the future of cybersecurity — we're redefining it. With a global footprint, our projects transcend borders, offering you the chance to dive into international ventures and make a difference on a global scale. At the heart of our success is our commitment to research and development, investing heavily to stay ahead in a constantly evolving landscape. But what truly sets us apart is our dedication to our team's well-being, fostering an environment where your growth and balance matter as much as the technology we pioneer. Discover your potential with us and be a part of a team driving innovation while prioritising your success and fulfilment.