Senior Offensive Security Engineer

About the role

Deriv is looking for a senior offensive security professional to lead red‑team activities across its global trading platform. You will think like an adversary, continuously emulate real‑world attacks, and turn every engagement into actionable detections and automation.

Key responsibilities

• Lead offensive security operations covering infrastructure, applications, cloud, identity and AI agents.
• Design and execute full‑kill‑chain attacks without shortcuts, targeting web, cloud, source code and internal systems.
• Translate findings into detection rules, automated responses and resilience improvements.
• Collaborate with incident response and purple‑team functions to validate and refine defenses.
• Mentor junior team members and share knowledge across the security organization.

Required profile

• Proven experience leading red‑team or advanced penetration testing engagements.
• Deep understanding of modern threat actors, including state‑sponsored and financially motivated groups.
• Ability to operate in a high‑pressure, 24/7 financial environment.
• Strong analytical mindset and passion for making threats irrelevant.

Required skills

• Red‑team operations and advanced penetration testing.
• Cloud security assessment.
• Identity and access security.
• Source‑code security analysis.
• AI/ML security testing.
• Incident response and detection engineering.
• Automation and scripting for security workflows.

What we offer

• Hands‑on production experience on a high‑scale financial platform.
• Opportunity to shape cutting‑edge security practices, including AI‑agent red‑team work.
• Collaborative environment with a dedicated security organization.