Red Team Lead: Offensive Security & Adversary Emulation

Permata Bank; Tangerang Selatan; On-site; IDR 900,000,000 - 1,300,000,000; Full time

Job summary

Permata Bank seeks a seasoned security professional to lead authorized red team engagements, aligning with MITRE ATT&CK to evaluate defenses across networks, applications, and cloud. You will design objectives, scopes, and success criteria while safely simulating adversary techniques within approved boundaries.

The role requires hands-on experience in offensive security within financial services, strong reporting skills, and a focus on remediation validation and governance.

Qualifications

• Bachelor degree in CS/InfoSec/IT or related field, or equivalent experience.
• Typically 4–7 years in penetration testing, offensive security or red teaming with hands-on assessment.
• Experience operating in regulated financial institutions is advantageous.

Responsibilities

• Design and conduct authorized, risk-based red team engagements across people, process, tech, and third-party exposure.
• Define engagement objectives, scope, target systems, assumptions, rules, approvals, safety constraints, escalation paths and success criteria.
• Develop threat-informed attack scenarios based on assets, actors, techniques, and intelligence.
• Conduct full lifecycle: recon, attack-surface mapping, enumeration, vulnerability discovery, initial access, exploitation, elevation, lateral movement, and objective validation.
• Report findings with remediation recommendations and present to technical owners and management.

Skills

Offensive Security

Red Team Methodology

Tools & Scripting

Detection Awareness

Communication Governance

Education

Bachelor's degree in CS/InfoSec/IT or related

Equivalent relevant experience

Experience in regulated financial institutions

Tools

Nmap

Burp Suite

Metasploit

Python

PowerShell

Bash

Job description

Permata Bank seeks a seasoned security professional to lead authorized red team engagements, aligning with MITRE ATT&CK to evaluate defenses across networks, applications, and cloud. You will design objectives, scopes, and success criteria while safely simulating adversary techniques within approved boundaries.

The role requires hands-on experience in offensive security within financial services, strong reporting skills, and a focus on remediation validation and governance.