Red Team Security Engineer - Offensive Pentesting & TTPs

XL Axiata; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

XL Axiata seeks a Security Engineer - Offensive Security (Red Team) to join the Security Operations team in Malaysia. You will plan and execute adversary simulations, develop offensive tactics, and provide SME guidance to defenders and remediation teams.

You will build tooling, perform exploitation across mixed environments, and produce reports for technical and executive audiences, while defining SOPs and ROE for Red/Purple Team operations.

Qualifications

• 3+ years of experience performing vulnerability assessments.
• Excellent understanding of OWASP Top 10 vulnerabilities and mitigations.
• Clear understanding of networking fundamentals: OSI layers, TCP/IP, protocols.
• Experience with a GNU/Linux based penetration testing OS (e.g., Kali, Parrot, BlackArch).
• Experience with security testing tools and tradecraft; knowledge of C2 frameworks and customization.
• Ability to craft/modify exploits without consumer tools like Metasploit.
• Good spoken and written English skills.

Responsibilities

• Plan, spearhead and execute adversary simulations to identify and mitigate vulnerabilities.
• Research and apply offensive TTPs to mimic threat actors.
• Provide SME offensive security guidance to cyber defenders and remediation teams.
• Develop tooling to support recon, automation, and metrics collection.
• Conduct full exploitation across AD, Windows, Linux, and MacOS environments.
• Produce comprehensive reports for technical and executive audiences.
• Define SOPs, ROE, methodologies and checklists for Red/Purple Team ops.
• Communicate risk levels and solutions clearly to reduce risk effectively.

Skills

Vulnerability assessments

OWASP Top 10

Networking fundamentals

GNU/Linux pentesting

Security testing tools

C2 frameworks

Exploitation techniques

English communication

Education

OSCP/OSCE/CRTP/GIAC or equivalent

Tools

Kali Linux

Parrot

BlackArch

Tenable

Job description

XL Axiata seeks a Security Engineer - Offensive Security (Red Team) to join the Security Operations team in Malaysia. You will plan and execute adversary simulations, develop offensive tactics, and provide SME guidance to defenders and remediation teams.

You will build tooling, perform exploitation across mixed environments, and produce reports for technical and executive audiences, while defining SOPs and ROE for Red/Purple Team operations.