{"id":2600214,"url":"https://alion.io/job/hkjc-senior-technical-manager-vulnerability-management-penetration-testing","title":"Senior Technical Manager, Vulnerability Management (Penetration Testing)","company":{"id":2691383,"name":"The Hong Kong Jockey Club","domain":"hkjc.com","url":"https://alion.io/company/hkjc","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Leadership","role_family":"Leadership","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Hong Kong"],"countries":["HK"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":63000,"max_usd":184000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2356},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Burp Suite","optional":false},{"name":"Kali Linux","optional":false},{"name":"Linux","optional":false},{"name":"Metasploit","optional":false},{"name":"Nessus","optional":false},{"name":"Nmap","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"Red Teaming","optional":false},{"name":"TCP/IP","optional":false},{"name":"Windows","optional":false},{"name":"Wireshark","optional":false}],"status":"closed","first_seen_at":"2026-10-08T15:00:00Z","employer_posted_date":"2026-10-08","last_verified_at":"2026-10-26T08:09:21Z","board_verified":false,"closed_at":"2026-10-26T08:09:21Z","days_open":17,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":17},"description":"The Hong Kong Jockey Club\nFounded in 1884, The Hong Kong Jockey Club (“the Club”) is a world-class racing club that acts continuously for the betterment of our society. The Club has a unique integrated business model, comprising racing and racecourse entertainment, a membership club, responsible sports wagering and lottery, and charities and community contribution. Through this model, the Club generates economic and social value for the community and supports the HKSAR Government in combatting illegal gambling.\nWho are we?\nWe are the IT Division of HKJC, a vibrant community of over 1,500 dedicated professionals working collaboratively across Hong Kong and Shenzhen.\nOur team is a diverse mix of individuals from various backgrounds, from all across the world. We embrace our humanity, recognizing that each of us brings unique strengths and perspectives. This diversity not only enriches our work environment but also drives our innovation and creativity as we strive to achieve our collective goals.\nWhat do we do?\nWe design, build, and operate the technology that powers the Club. Our primary focus is on delivering the service that supports our hospitality, racing and wagering operations, to ensure that our customers and members enjoy exceptional experiences.\nWe also deliver the changes necessary to drive business growth through new products and services. And, we are committed to safeguarding the Club by protecting it from external threats, providing a secure and resilient technological environment.\nThe Department\nThe Cyber Security Department is essential to the Club’s ongoing success, safeguarding information assets, IT systems, networks, and cloud platforms while ensuring the resilience and continuity of critical operations. Through the implementation of strong risk governance frameworks and cybersecurity standards, the department protects the Club against emerging threats and ensures compliance with regulatory requirements in Hong Kong and China.\nAs the first line of defense, the department plays a key role in maintaining the Club’s reputation and operational resilience. Its core responsibilities include identifying and addressing vulnerabilities, protecting sensitive information, ensuring rapid incident response, overseeing access management, and promoting Club-wide cybersecurity awareness.\nThe Job\nLead and oversee penetration testing engagements end-to-end, ensuring high-quality execution across applications and environments to uncover and address security weaknesses\nAct as a trusted Subject Matter Expert, supporting penetration testing requests, anticipating project requirements, and providing practical, effective solutions\nPerform and coordinate penetration testing and vulnerability assessments, including:System and infrastructure security reviews\nWeb application penetration testing\nMobile application security testing\nVulnerability scanning and prioritisation\n\nIdentify, validate, and exploit vulnerabilities using advanced manual techniques and automated tools to strengthen security posture\nDevelop and refine custom scripts, payloads, and exploits to test resilience against security controls\nDeliver detailed technical reports and remediation guidance, ensuring findings are clearly documented and aligned with organisational cybersecurity standards\nEngage stakeholders to communicate findings and remediation priorities, tracking progress to ensure timely closure of vulnerabilities\nDesign and maintain dashboards and metrics (KRIs) to monitor cybersecurity posture and provide regular reporting to management\nContribute to the development and improvement of internal standards, methodologies, and documentation for penetration testing and vulnerability management\nManage vendor relationships, ensuring service quality and monitoring performance against agreed SLAs\nSupport broader cybersecurity initiatives by undertaking additional responsibilities as directed by Cyber Security Management\nPromote a collaborative and inclusive team culture, actively contributing to cross-team efforts and modelling cooperative behaviours\nAbout You\nUniversity degree qualification in Computer Science, Information Technology, cybersecurity or related discipline\nIndustry-recognised certification in one or more of the following - OSCP, OSCE, OSWE, GPEN, CEH, CISSP, CISA, or equivalent\n10 years or more of working experience in the penetration testing and vulnerability management domain across various disciplines\nHands-on experience with industry-standard tools such as Kali Linux, Burp Suite, Qualys, Nessus, Nmap, Metasploit, Wireshark, etc.\nDeep technical knowledge in:Operating systems: Windows, Linux, macOS\nOffensive tooling and technique: Implant reverse shells, Command and Control (C2) infrastructure\nNetwork and security architecture: TCP/IP, IDS/IPS, firewalls, WAFs, web content filtering\nCloud platform: Integrated security solutions across major cloud providers (e.g. AWS, Azure)\nApplication security: Coding practices and architecture design\n\nDemonstrated ability to perform penetration testing, vulnerability assessments, and security reviews for applications and infrastructure\nContribute to the development and refinement of penetration testing and secure vulnerability management standards\nExperience participating in red team operations is desired\nExploit research and development skills are a plus\nSource code review experience is a plus\nProven expertise in conducting application security assessments across web, mobile, and self-developed applications\nStrong service and a customer-focused approach to the service being delivered\nExcellent interpersonal, collaborative and communication skills\nWell-disciplined with exemplary professional competence and integrity\nApply Now!\nWe offer competitive salary and benefits packages, a dynamic working environment and development opportunities.\nAdd horsepower to your career today. Click the “Apply Now” button to create an account and submit your application.\nEqual Opportunity and Inclusive Hiring\nWe are an equal opportunity employer and strive to create an inclusive workplace for all. Applicants from diverse backgrounds are welcomed to apply. If you have any special needs or require accommodations during the interview process, please e-mail us via . Personal data provided by job applicants will be used strictly in accordance with the Club's notice to employees and job applicants relating to the Personal Data (Privacy) Ordinance. A copy of which will be provided immediately upon request.","description_format":"text","description_chars":6529,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Endpoint Security","Information Security","Application Security"],"lifecycle":[{"event":"open","at":"2026-10-15T07:54:44Z"},{"event":"close","at":"2026-10-26T08:09:21Z"}],"visa":[],"liveness":null,"pay":null,"html_url":"https://alion.io/job/hkjc-senior-technical-manager-vulnerability-management-penetration-testing","json_url":"https://alion.io/job/hkjc-senior-technical-manager-vulnerability-management-penetration-testing.json","meta":{"generated_at":"2026-10-27T07:25:10Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8006,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2691383},"rest":"https://alion.io/mcp/rest/get_company?id=2691383"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhkjc-senior-technical-manager-vulnerability-management-penetration-testing"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhkjc-senior-technical-manager-vulnerability-management-penetration-testing"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhkjc-senior-technical-manager-vulnerability-management-penetration-testing"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/hkjc-senior-technical-manager-vulnerability-management-penetration-testing\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhkjc-senior-technical-manager-vulnerability-management-penetration-testing"}]}