Senior Offensive Security Engineer (Red Team Lead)

About the role

Deriv is hiring a Red Team Lead/Operator to lead offensive security operations across its infrastructure, applications, cloud and people. The role is embedded in a Security & AI Engineering organisation that runs its own incident response and purple teams findings directly into detections. Work spans Dubai and Malaysia.

Key responsibilities

• Plan and run full-kill-chain red team engagements mapped to MITRE ATT&CK
• Design and run social engineering and physical/insider threat simulations
• Attack cloud environments, Kubernetes and CI/CD pipelines, and conduct source code and application-layer exploitation
• Red-team the AI agent stack (prompt injection, tool-calling abuse, agent-to-agent trust, credential exposure)
• Build custom tooling, C2 infrastructure and payloads that evade detection
• Write reports and executive summaries that lead to remediation
• Partner with SOC and Threat Hunting on purple-team exercises and mentor L1/L2 operators

Required profile

• 6+ years of actual offensive security, including full-scope red teaming
• OSCP required; OSCE, OSEP, OSED, CRTO or equivalent is a real plus
• Depth in at least three areas: AD/network exploitation, cloud attack paths (AWS/GCP), web/API exploitation, custom C2 development, social engineering/physical, mobile
• Experience operating against modern EDR-instrumented environments
• Ability to write reports that get fixed and to write tools in Python, Go or Rust