Lead Red Team Security Operations Engineer

Bybit Limited; Hong Kong; On-site; HKD 900,000 - 1,500,000; Full time

Benefits offered by this job

Study Growth Fund

Internal Events

Global Collaboration

Career Advancement

Internal Mobility

Job summary

Bybit Limited, a leading cryptocurrency exchange, is seeking a Principal Security Operation Engineer (Red Team) to lead penetration testing and attack-defense exercises across enterprise networks, applications, and cloud environments.

You will model real attack paths, assess AI security risks, and help optimize security detection rules, response processes, and governance. Strong red-team tooling experience is required, with a global, fast-paced enterprise mentality.

Qualifications

• Proficient in cyber security fundamentals and network security concepts.
• Experience with red team operations, attack simulations, and defense planning.
• Familiar with Windows, Linux, and macOS security mechanisms and incident response.

Responsibilities

• Develop and execute penetration testing and red team exercises against enterprise networks, apps, and cloud environments.
• Lead or participate in red-blue exercises to assess detection, alerting, and recovery capabilities.
• Identify attack paths, model scenarios, and provide mitigations across assets and APIs.
• Evaluate AI applications for security risks including prompts, data handling, and tool integration.
• Design and validate security tests, build automation for repeatable assessments, and generate technical reports.

Skills

TCP/IP basics

Red team tooling

Operating systems security

Web framework security

Cloud security

AI security

Threat modeling

Tools

Sliver

Cobalt Strike

Burp Suite

Metasploit

Nmap

Masscan

Frida

Impacket

Job description

Bybit Limited, a leading cryptocurrency exchange, is seeking a Principal Security Operation Engineer (Red Team) to lead penetration testing and attack-defense exercises across enterprise networks, applications, and cloud environments.

You will model real attack paths, assess AI security risks, and help optimize security detection rules, response processes, and governance. Strong red-team tooling experience is required, with a global, fast-paced enterprise mentality.