Security Engineer / Senior Security Engineer – Red Team

Location: Petaling Jaya, Selangor, Malaysia

Work Mode: Fully Onsite

Experience: 3+ Years

Employment Type: Full-Time

Job Summary

We are looking for a Security Engineer / Senior Security Engineer – Red Team with strong hands-on experience in Red Teaming, Offensive Security, Vulnerability Assessment, Penetration Testing, and Adversary Simulation.

The ideal candidate should have practical experience identifying and exploiting vulnerabilities across enterprise environments, including Windows, Linux/Unix, macOS, Active Directory, web applications, and network infrastructure.

Key Responsibilities

• Plan and execute Red Team engagements and Adversary Simulation exercises.
• Conduct advanced Vulnerability Assessment and Penetration Testing (VA/PT).
• Perform offensive security assessments across Windows, Linux/Unix, macOS, web and network environments.
• Conduct Active Directory and Windows penetration testing.
• Research and apply offensive Tactics, Techniques and Procedures (TTPs).
• Perform reconnaissance, exploitation, privilege escalation and post-exploitation activities.
• Work with Command and Control (C2) frameworks during Red Team operations.
• Modify existing exploits and develop custom exploits/Proof of Concepts where required.
• Develop scripts and tools to support reconnaissance, automation and Red Team operations.
• Prepare detailed technical reports and executive-level security assessment reports.
• Define and maintain Red Team / Purple Team SOPs, Rules of Engagement (ROE) and methodologies.
• Collaborate with security, infrastructure and application teams to communicate findings and remediation recommendations.

Required Skills

• Minimum 3+ years of hands-on experience in Vulnerability Assessment and Penetration Testing.
• Strong understanding of Red Teaming and Offensive Security methodologies.
• Good knowledge of OWASP Top 10 and web application security.
• Strong networking fundamentals including OSI, TCP/IP and common network protocols.
• Hands-on experience with Kali Linux and Linux command line.
• Experience with Active Directory / Azure Active Directory security testing.
• Experience with C2 frameworks such as Cobalt Strike, Sliver, Mythic or similar.
• Knowledge of exploit development and exploitation techniques.
• Strong understanding of Windows security and penetration testing.
• Ability to identify vulnerabilities and perform end-to-end exploitation.
• Good communication and English language skills.
• Ability to prepare clear technical and management-level reports.

Good to Have

• Certifications such as OSCP, OSEP, OSCE, CRTP, GIAC or equivalent.
• Experience with Tenable/Nessus.
• CVE research and exploit development experience.
• Bug bounty experience.
• Experience with Purple Team / Threat Emulation activities.
• Security conference presentations, workshops or technical publications.
• Contributions to open-source security projects.
• Programming/scripting experience with Python, PowerShell, Bash, C/C++.
• Experience with security tooling development and code review.

Preferred Candidate Profile

Candidates with hands-on experience in Red Team Operations, Offensive Security, Adversary Simulation, Active Directory Pentesting, C2 Operations and Exploit Development are preferred.

Candidates must be willing to work fully onsite at CelcomDigi Tower, Petaling Jaya, Malaysia.

Keywords

Red Team, Red Team Engineer, Offensive Security, Penetration Testing, Penetration Tester, Vulnerability Assessment, Adversary Simulation, Threat Emulation, Active Directory, Azure AD, Cobalt Strike, Sliver, Mythic, Metasploit, Kali Linux, Exploit Development, OWASP, Ethical Hacking, Purple Team, OSCP, OSEP, CRTP.