Senior Red Team Engineer

Shopee; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Shopee’s Red Team within Information Security simulates real-world adversaries, proactively uncovering vulnerabilities across Sea Group’s infrastructure, apps, and people, including Shopee. The team drives security maturity through research, tooling, and methodology refinement.

Requirements include a CS degree and 5+ years of security engineering, with end-to-end pentesting, multi-platform research, social engineering, and AD/ Kerberos expertise.

Qualifications

• Bachelor's degree in Computer Science or related field.
• 5+ years of security engineering experience with red/blue team exposure.
• End-to-end penetration testing: external compromise, lateral movement, privilege escalation.
• Vulnerability research across OS, cloud native, IoT, or mobile platforms.
• Design and execution of social engineering campaigns and phishing.
• Familiarity with LLM security risks and tool integrations is a plus.
• Active Directory attack know-how including Kerberos and domain lateral movement.
• Ability to build or adapt exploitation tools and automation in Python/Go/C.

Responsibilities

• Conduct offensive security research: vulnerability discovery, exploit development, tooling.
• Drive purple team collaboration: map attack paths to MITRE ATT&CK and produce reports.
• Codify attack workflows and build a scalable red team program.

Skills

Penetration testing

Red team tooling

ATT&CK mapping

Phishing campaigns

Exploitation development

Python/Go/C

EDR evasion

SOC collaboration

Education

Bachelor's Degree in Computer Science

Job description

Shopee’s Red Team within Information Security simulates real-world adversaries, proactively uncovering vulnerabilities across Sea Group’s infrastructure, apps, and people, including Shopee. The team drives security maturity through research, tooling, and methodology refinement.

Requirements include a CS degree and 5+ years of security engineering, with end-to-end pentesting, multi-platform research, social engineering, and AD/ Kerberos expertise.