Offensive Security Engineer Lead
Lead Red Team operations, advanced adversary simulations, and offensive security to protect large-scale digital platforms.
About The Company
A leading technology company in the financial services industry, building secure, scalable, and high-performance digital platforms that serve millions of users. The company is continuously investing in engineering excellence to drive innovation and business growth.
Job Responsibilities
If this opportunity aligns with your experience and aspirations, I'd love to hear from you. Apply now or send your CV to [email protected]
A leading technology company in the financial services industry, building secure, scalable, and high-performance digital platforms that serve millions of users. The company is continuously investing in engineering excellence to drive innovation and business growth.
Job Responsibilities
- Lead and drive the organization's offensive security, penetration testing, and Red Team strategy.
- Plan and execute advanced adversary simulations, emulating real-world threat actors and APTs using the MITRE ATT&CK framework.
- Assess security controls across the full Lockheed Martin Cyber Kill Chain to identify gaps and strengthen defenses.
- Partner with SOC and Incident Response teams to conduct Purple Team exercises and improve detection and response capabilities.
- Perform penetration testing and vulnerability exploitation across applications, infrastructure, and cloud environments, delivering actionable remediation recommendations.
- Develop and enhance offensive security tools, automation scripts, and command-and-control (C2) frameworks.
- Min 7 years of hands-on experience in Offensive Security, Ethical Hacking, or Penetration Testing, including 2+ years leading Red Team or Offensive Security initiatives.
- Strong expertise in Red Team operations, adversary simulation, and the MITRE ATT&CK framework, with solid knowledge of the Lockheed Martin Cyber Kill Chain.
- Hands-on experience with offensive security tools such as Cobalt Strike, Burp Suite, Metasploit, and cloud security testing across AWS, GCP, or Azure.
- Proficient in scripting/programming (Python, Go, PowerShell, or Bash) to automate attacks and develop custom exploits.
- Relevant offensive security certifications (OSCE, OSEP, OSWE, GXPN, CRTO, or equivalent) are highly preferred.
- Strong communication skills with the ability to translate technical security findings into clear business risks and remediation plans.
If this opportunity aligns with your experience and aspirations, I'd love to hear from you. Apply now or send your CV to [email protected]
Referral reward: Rp5000000