Offensive Security Engineer (Red Team) - Information Security

• Design and perform APT adversary emulation to determine if infrastructure components, systems and applications meet confidentiality, integrity, authentication, availability, authorisation, and non-repudiation standards
• Translate requirements into test plan, write and execute test scripts or codes in line with standards and procedures to determine vulnerability to attacks
• Responsible for the weaponisation capabilities of the red team
• Research of undiscovered vulnerabilities (0 day) in red team engagements

• Bachelor's degree or higher in Computer Science, Information Technology, Programming & Systems Analysis, Engineering, or other related fields
• Minimum 5 years of work experience in red team-related or relevant positions
• Strong security development capabilities, with expertise in Python, Go, and in-depth experience in dynamic web crawling and distributed development
• Proficiency in code auditing with the ability to quickly identify vulnerabilities in insecure code that can be exploited by the red team e.g. command injection, insecure deserialization, stack overflow, independently writing exploit codes
• Proficiency in various frameworks such as Puppeteer, Playwright, RabbitMQ, ELK, Yaklang, etc
• Strong communication skills and effective teamwork spirit
• Self-starter and fast learning ability
  

Preferred Experience

• Experience in pen-testing and red teaming, and familiar with kill chains in ATT&CK Framework (e.g. initial access, Windows AD testing, lateral movement)
• Experience in performing APT offensive and defensive
• Proven track record of bug bounty awards, Github star authors, etc