Red Team Security Engineer - Adversary Simulation

Axonect; Kuala Lumpur; On-site; MYR 100,000 - 180,000; Full time

Job summary

Axiata is seeking a skilled security engineer to join its fast-growing Security Operations team. You will plan and execute adversary simulations, develop offensive TTPs, and collaborate with defenders to mitigate vulnerabilities across Southeast Asia.

Ideal candidates have strong Linux pentesting experience, familiarity with OSCP-like concepts, and a track record of producing clear, executive-ready security reports. Excellent communication skills are essential.

Qualifications

• 3+ years of vulnerability assessments experience
• Strong knowledge of OWASP Top 10 and mitigations
• Solid networking fundamentals (OSI, TCP/IP)
• Experience with Linux-based pentesting (Kali, Parrot, BlackArch)
• Familiarity with security testing tools and C2 concepts; capable of custom exploits

Responsibilities

• Plan, spearhead and execute adversary simulations to identify vulnerabilities
• Research and apply offensive TTPs to mimic threat actors
• Provide expert offensive security input for defenders and remediation teams
• Develop tooling to support reconnaissance, automation, and metrics
• Conduct full exploitation in diverse environments (Windows, Linux, MacOS, AD)
• Produce comprehensive reports for technical and executive audiences
• Define SOPs, ROE, methodologies for Red/Purple Team ops
• Communicate risk levels and solutions clearly to reduce risk effectively

Skills

Vulnerability assessments

OWASP Top 10

Networking fundamentals

Linux command line

Security testing tools

Exploitation concepts

Communication skills

Tools

Kali Linux

Parrot OS

BlackArch

Metasploit

Job description

Axiata is seeking a skilled security engineer to join its fast-growing Security Operations team. You will plan and execute adversary simulations, develop offensive TTPs, and collaborate with defenders to mitigate vulnerabilities across Southeast Asia.

Ideal candidates have strong Linux pentesting experience, familiarity with OSCP-like concepts, and a track record of producing clear, executive-ready security reports. Excellent communication skills are essential.