Senior Red Team Lead: Offensive Security & AI

Deriv; Dubai; On-site; AED 180,000 - 270,000; Full time

Job summary

Deriv is seeking a senior Red Team Lead to proactively thwart threats before they become incidents. You will lead offensive security across infrastructure, applications, cloud, and people, turning engagements into detections, automation, and resilience.

We value deep adversary experience, real-world tooling, and the ability to produce actionable remediation reports. You will collaborate with SOC and Threat Hunting and mentor junior operators in a fast-moving fintech environment in Dubai and

Qualifications

• 6+ years of hands-on offensive security in full-scope red team
• OSCP certification required; other adversary-simulation certs are a plus
• Deep expertise in internal AD/network, cloud attack paths (AWS/GCP), web/API exploitation
• Ability to create tooling and implants in Python/Go/Rust
• Proven track record evading modern EDR in regulated fintech environments
• Ability to produce actionable, remediation-focused reports

Responsibilities

• Plan and lead full kill chain red team engagements mapped to MITRE ATT&CK
• Design and run social engineering and insider threat simulations
• Attack cloud environments, Kubernetes, and CI/CD pipelines for misconfigurations and privilege escalation paths
• Conduct source code analysis and application-layer exploitation
• Red-team AI agent stack: prompt injection, tool‑calling abuse, agent boundaries
• Build and maintain custom tooling, C2 infrastructure, and evasive payloads
• Write engagement reports and executive summaries driving remediation
• Partner with SOC/Threat Hunting for purple-team exercises
• Mentor L1/L2 operators and contribute to capability roadmap

Skills

Python

Go

Rust

Threat modeling

Offensive security

Tools

Cobalt Strike

Job description

Deriv is seeking a senior Red Team Lead to proactively thwart threats before they become incidents. You will lead offensive security across infrastructure, applications, cloud, and people, turning engagements into detections, automation, and resilience.

We value deep adversary experience, real-world tooling, and the ability to produce actionable remediation reports. You will collaborate with SOC and Threat Hunting and mentor junior operators in a fast-moving fintech environment in Dubai and