Senior Red-Team Engineer - AI & Cloud Security

Bybit; Hong Kong; On-site; HKD 800,000 - 1,100,000; Full time

Job summary

Bybit is seeking a senior security professional in Hong Kong to lead penetration testing, red team exercises, and AI security evaluation. You will model attack paths, develop detection rules, and provide comprehensive reports on risks and mitigations across networks, cloud, and applications.

Ideal candidates bring 5+ years in red/blue operations, experience with enterprise-scale tests, and familiarity with AI security governance and toolchains like Sliver, Cobalt Strike, Burp Suite, and

Qualifications

• More than 5 years of experience in red team, penetration testing, security research, or offensive and defensive exercises.
• Experience in large-scale enterprise attack and defense drills, red-blue confrontation, cloud attack and defense, or intranet penetration preferred.
• Familiar with AI security governance ideas, including model call auditing, prompt word security, and sandbox isolation.

Responsibilities

• Develop and execute penetration testing, red-blue exercises, and real attack simulations across enterprise networks, apps, and cloud environments.
• Lead or participate in red-blue drills to test defense detection, alarm analysis, traceability, and incident response.
• Model attack paths from external surfaces to core assets and optimize security detection rules and baselines.
• Output security evaluation reports with attack paths, risk levels, data leakage risks, and governance recommendations.
• Collaborate with blue teams, SOC, infrastructure, R&D, and business teams to drive vulnerability repair and rule optimization.

Skills

Penetration testing

Red team operations

Threat modeling

Vulnerability assessment

Linux/Windows security

WAF/EDR/SIEM

Cloud security

APIs security

Education

Bachelor's degree in Computer Science or related

Tools

Sliver

Cobalt Strike

Burp Suite

Nmap

Masscan

Frida

Impacket

Kubernetes

Job description

Bybit is seeking a senior security professional in Hong Kong to lead penetration testing, red team exercises, and AI security evaluation. You will model attack paths, develop detection rules, and provide comprehensive reports on risks and mitigations across networks, cloud, and applications.

Ideal candidates bring 5+ years in red/blue operations, experience with enterprise-scale tests, and familiarity with AI security governance and toolchains like Sliver, Cobalt Strike, Burp Suite, and