SRLabs is home to knowledge leaders securing critical infrastructures in finance, energy, and telecommunications. We focus on hands-on hacking resilience – not compliance –, which we shape by combining our hacking research with impactful consulting work for innovation leaders that have a natural thrive for cutting-edge technologies. We are looking for Security Consultant to join our team in Hong Kong to drive security evolution through ethical hacking, research and consulting. We welcome candidates from strong technical backgrounds, including software engineering, cloud/platform engineering, systems architecture, and infrastructure operations – who are looking to transition into cybersecurity consulting. Job brief: In this role, you will be primarily responsible for providing security consulting services to a wide variety of clients. You work closely with hackers, researchers, and consultants to identify security issues and provide recommendations in complex, large-scale and one-of-a-kind-environments. Your responsibilities: Depending on the project scope, perform technical analyses including web & mobile penetration testing, red teaming, architecture & code review, etc. Maintain a close working relationship with clients and be their trusted advisor for mastering IT security challenges to their organization Collaborate with internal and external teams to identify security problems and gaps that require new and unique solutions Produce high-quality technical reports and presentations Conduct technical trainings and workshops for clients and internal teams within SRLabs Provide guidance to Junior Security Consultants on complex projects that require your experience and expertise Engage in research and be up to date on security best practices and techniques Strong foundational knowledge of information technology, including (Operating systems, Networking and Web technologies) Exceptional analytical and quantitative problem-solving skills Expertise in at least two technical topics (network/cloud architecture, software engineering, CI/CD pipelines, identity & access management, vulnerability management, penetration testing, red teaming, embedded systems security) Exposure to client communication and ability to provide appropriate and clear recommendations Experience in creating technical reports and presentations that are comprehensive to tech and non-technical audiences Excellent verbal and written communication skills in English