Lead Red Team Engineer – Offensive Security, Cloud & AI

Deriv.com; Dubai; Hybrid; AED 400,000 - 720,000; Full time

Job summary

Deriv.com seeks a senior Red Team Lead to operate as an adversary, not an auditor, driving offensive security across infrastructure, apps, cloud, and people. You will lead detections, automation, and resilience by emulating real attackers and surfacing gaps automated defenses miss.

The role spans Dubai and Malaysia, leveraging live environments to push detection, response, and tooling maturity. You will mentor operators and contribute to the offensive security roadmap while embedding AI and

Qualifications

• 6+ years doing actual offensive security in a full‑scope role.
• OSCP is required; other adversary-simulation certs are a plus.
• Real depth in at least three areas: AD/network exploitation, cloud attack paths, web/API exploitation.
• Ability to write tooling in Python/Go/Rust beyond off-the-shelf tools.

Responsibilities

• Plan and lead full-kill-chain red team engagements mapped to MITRE ATT&CK.
• Design social engineering and insider threat simulations based on real-world TTPs.
• Attack cloud environments, Kubernetes, and CI/CD pipelines to find misconfigurations.
• Analyze source code and perform application-layer exploitation on trading platforms and payments.
• Lead red-team activities against AI agent stacks and build evasion tooling.
• Create engagement reports and executive summaries for remediation.

Skills

Offensive security

OSCP

Python/Go/Rust

Cloud security

AD/Network exploitation

Tools

Custom C2

Python tooling

Job description

Deriv.com seeks a senior Red Team Lead to operate as an adversary, not an auditor, driving offensive security across infrastructure, apps, cloud, and people. You will lead detections, automation, and resilience by emulating real attackers and surfacing gaps automated defenses miss.

The role spans Dubai and Malaysia, leveraging live environments to push detection, response, and tooling maturity. You will mentor operators and contribute to the offensive security roadmap while embedding AI and