Lead Red Team Engineer – Offensive Security

Deriv.com; Cyberjaya; On-site; MYR 160,000 - 260,000; Full time

Job summary

Deriv.com is seeking a Red Team Lead/Operator in Cyberjaya to emulate real attackers, lead full kill-chain engagements, and drive detections and automation across fintech platforms. You will work with cloud, Kubernetes, source code, and AI agent stacks, maturing offensive security as a real discipline.

You have 6+ years in offensive security, OSCP, and strong tooling skills in Python/Go/Rust. This role partners with SOC and incident response in a high-stakes, live trading environment.

Qualifications

• 6+ years of offensive security with full-scope red team experience.
• OSCP is required; additional adversary-simulation certs are a plus.
• Depth in at least three areas: AD/network, cloud, web/API, or C2.
• Ability to write tooling in Python, Go, or Rust.
• Experience in EDR-instrumented environments and real-world breaches.

Responsibilities

• Plan and execute full-kill-chain red team engagements across targets.
• Design social engineering and insider threat simulations.
• Test cloud environments, Kubernetes, CI/CD pipelines for misconfigurations.
• Perform source code and application-layer exploitation in trading domains.
• Develop C2 tooling and payloads to evade detections and improve coverage.
• Produce remediation-focused engagement reports and executive summaries.
• Collaborate with SOC and Threat Hunting for purple-team exercises.
• Mentor L1/L2 operators and contribute to capability roadmap.

Skills

OSCP

Threat emulation

Red team operations

Adversary simulation

Python/Go/Rust tooling

Cloud security (AWS/GCP)

Education

OSCP

OSCE

OSEP

OSED

CRTO

Tools

C2 infrastructure

Tooling development

Job description

Deriv.com is seeking a Red Team Lead/Operator in Cyberjaya to emulate real attackers, lead full kill-chain engagements, and drive detections and automation across fintech platforms. You will work with cloud, Kubernetes, source code, and AI agent stacks, maturing offensive security as a real discipline.

You have 6+ years in offensive security, OSCP, and strong tooling skills in Python/Go/Rust. This role partners with SOC and incident response in a high-stakes, live trading environment.