Join Our Team
Build your career with Hong Kong's offensive security team
Cutting-Edge Work
Work on challenging security projects with the latest techniques
Small Team
Collaborate closely with experienced security professionals
Growth Opportunities
Continuous learning and certification support
Open Positions
Find your next opportunity with us.
Join our offensive security team to conduct advanced penetration testing and red team operations against enterprise environments. You will work alongside senior security professionals to identify vulnerabilities, develop exploits, and help clients strengthen their security posture.
Responsibilities
- Conduct web application, network, and infrastructure penetration testing
- Participate in red team engagements including social engineering
- Develop and customize exploitation tools and scripts
- Write detailed technical reports with remediation guidance
- Research new attack techniques and vulnerabilities
- Collaborate with clients to explain findings and solutions
Requirements
- OSCE3 certification required (OSEP + OSWE + OSED)
- Strong understanding of Windows and Linux security
- Experience with penetration testing tools (Burp Suite, Cobalt Strike, etc.)
- Programming/scripting skills (Python, PowerShell, etc.)
- Excellent written and verbal communication skills
- Self-motivated with strong attention to detail
Design intuitive interfaces for our security tools and client dashboards. Create seamless experiences for complex security workflows, making advanced security concepts accessible to users of all technical levels.
Responsibilities
- Design user interfaces for internal security tools and platforms
- Create wireframes, prototypes, and high-fidelity mockups
- Conduct user research and usability testing
- Develop and maintain design systems and component libraries
- Collaborate with developers to ensure design implementation quality
- Present design concepts to stakeholders and incorporate feedback
Requirements
- 3+ years of UI/UX design experience
- Portfolio demonstrating strong visual design skills
- Proficiency in Figma, Sketch, or similar design tools
- Understanding of design systems and component-based design
- Experience designing data-heavy dashboards is a plus
- Interest in cybersecurity industry is preferred
Build and maintain our web applications, security tools, and client portal infrastructure using modern frameworks. You will work on customer-facing applications as well as internal tools that support our security operations.
Responsibilities
- Develop and maintain React-based web applications
- Build APIs and backend services using Node.js
- Implement secure authentication and authorization systems
- Optimize application performance and scalability
- Write clean, maintainable, and well-documented code
- Participate in code reviews and technical discussions
Requirements
- Proficiency in React and modern JavaScript/TypeScript
- Experience with Node.js backend development
- Understanding of RESTful API design principles
- Familiarity with database systems (PostgreSQL, MongoDB)
- Security awareness and secure coding practices
- Experience with cloud platforms (AWS, GCP) is a plus
Drive brand awareness and lead generation for our security services through digital marketing, content creation, and industry engagement. Help position COFFSec as Hong Kong's premier offensive security provider.
Responsibilities
- Develop and execute digital marketing campaigns
- Create engaging content for social media and blog
- Manage relationships with industry partners and media
- Organize and participate in industry events and conferences
- Track and analyze marketing metrics and ROI
- Support business development with marketing materials
Requirements
- Experience in B2B marketing, preferably in tech/security
- Strong written and verbal communication skills
- Familiarity with digital marketing tools and analytics
- Understanding of the cybersecurity industry is preferred
- Creative thinking and attention to detail
- Ability to work independently and as part of a team