Lead Red Team Engineer — Fintech Offensive Security

Deriv; Cyberjaya; Hybrid; MYR 180,000 - 280,000; Full time

Job summary

Deriv is seeking a Red Team Lead/Operator to proactively defeat threats before they become incidents across our infrastructure, applications, cloud and people. You’ll lead offensive security operations 24/7, turning engagements into detections, automation and resilience.

Join a Security & AI Engineering org spanning Dubai and Malaysia, where you’ll mentor operators, build tooling, and drive real remediation from the trenches of live financial platform security.

Qualifications

• 6+ years in full-scope red team engagements.
• OSCP is required; other adversary-simulation certs count.
• Deep experience in AD/network, cloud attack paths, web/API, C2 development, social/physical.
• Ability to write tooling in Python/Go/Rust, not just use off-the-shelf tools.
• Experience operating against modern EDR-instrumented environments.
• Understanding regulatory fintech blast radius and balancing security with business continuity.

Responsibilities

• Plan and lead full kill chain red team engagements mapped to MITRE ATT&CK.
• Design social engineering and insider threat simulations using real-world TTPs.
• Attack cloud environments, Kubernetes, and CI/CD pipelines to find misconfigurations.
• Analyze source code and perform application-layer exploits for trading and payments platforms.
• Red-team AI agent stacks, prompt injection, tool‑calling abuse, and credential exposure tests.
• Build and maintain custom tooling, C2 infrastructure, and evasive payloads.
• Write engagement reports and executive summaries driving remediation.
• Collaborate with SOC and Threat Hunting for purple-team exercises.
• Mentor L1/L2 operators and shape the offensive security roadmap.

Skills

Python

Go

Rust

Threat emulation

Adversary simulations

Education

OSCP

OSCP-equivalent certifications (e.g., OSCE/OCEP, CRTO)

Tools

Cobalt Strike

Kali Linux

AWS

GCP

Job description

Deriv is seeking a Red Team Lead/Operator to proactively defeat threats before they become incidents across our infrastructure, applications, cloud and people. You’ll lead offensive security operations 24/7, turning engagements into detections, automation and resilience.

Join a Security & AI Engineering org spanning Dubai and Malaysia, where you’ll mentor operators, build tooling, and drive real remediation from the trenches of live financial platform security.