Senior/Lead Security Engineer, Red team

Job description

We are seeking a dedicated and hands-on Lead Security Engineer to spearhead our Red Team and Offensive Security initiatives. In this role, you won't just be running scans; you will be the primary architect of our adversarial simulation strategy, taking full ownership of penetration testing, red teaming, and the emerging frontier of AI Security. What you'll be doing: - Strategic Red Teaming & Pentesting - Define, execute, and manage the annual offensive security roadmap, including internal and external penetration tests. - Design complex red team campaigns that simulate real-world TTPs (Tactics, Techniques, and Procedures) to test our detection and response capabilities. - Beyond discovery, you will partner with engineering teams to provide actionable remediation guidance and validate fixes. - AI Security Initiative - Lead security assessments for AI/ML deployments, focusing on prompt injection, data poisoning, model inversion, and membership inference attacks. - Integrate AI-specific security frameworks (e.g., OWASP Top 10 for LLMs, MITRE ATLAS) into our standard security lifecycle. - Develop specialized playbooks for "jailbreaking" and stress-testing our proprietary AI agents and infrastructure. - Leadership & Mentorship - Evaluate and select third-party security vendors and bug bounty platforms to augment internal efforts. - Act as the subject matter expert for the HODs and engineering leadership on the evolving threat landscape. - Oversee the creation of custom scripts and automated offensive tools to scale our testing capabilities. What we're looking for: - 5+ years of working experience in related work roles mentioned above. - Degree in Computer Science, Information Systems, Engineering or equivalent - Understanding and/or experience working in a Cryptocurrency/Blockchain/Fintech/Finance Trading domain. - Ability to translate technical security issues into clear actions for executives and engineers. - Excellent communication, presentation and planning skills. - Fluent written and spoken English. - Nice to have: - Prior experience in a crypto exchange, blockchain company, or high-risk trading platform. - Relevant certifications: leadership (CISSP, CISM, etc), offensive (OSCP, OSWE, etc), defensive (GSOM, GCIH, etc) and cloud security (CCSP, AWS). What’s in it for you: - MacBook or high-end laptop for working. - Full coverage of social insurance. - Premium health care for you and your family members. - Full 100% salary during probationary period. - Working in a professional, friendly, well-equipped workspace with both foreigners and Vietnamese. - Extensive on job training; will always have chances to work with new emerging technologies. - Friendly and fun start-up work culture. Find out more about Coinhako here https://www.coinhako.com/ https://www.coinhako.com/ and don't forget to visit our Careers Page https://www.coinhako.com/join-us https://www.coinhako.com/join-us By submitting your application to us, you consent to the collection, use, disclosure and processing of your personal data in accordance with our privacy policy, which is accessible at https://www.coinhako.com/legal/sg-1/privacy_policy.