We are seeking a dedicated and hands-on Lead Security Engineer to spearhead our Red Team and Offensive Security initiatives. In this role, you won't just be running scans; you will be the primary architect of our adversarial simulation strategy, taking full ownership of penetration testing, red teaming, and the emerging frontier of AI Security.
What you'll be doing:
- Strategic Red Teaming & Pentesting
- Define, execute, and manage the annual offensive security roadmap, including internal and external penetration tests.
- Design complex red team campaigns that simulate real-world TTPs (Tactics, Techniques, and Procedures) to test our detection and response capabilities.
- Beyond discovery, you will partner with engineering teams to provide actionable remediation guidance and validate fixes.
- AI Security Initiative
- Lead security assessments for AI/ML deployments, focusing on prompt injection, data poisoning, model inversion, and membership inference attacks.
- Integrate AI-specific security frameworks (e.g., OWASP Top 10 for LLMs, MITRE ATLAS) into our standard security lifecycle.
- Develop specialized playbooks for jailbreaking and stress-testing our proprietary AI agents and infrastructure.
- Leadership & Mentorship
- Evaluate and select third-party security vendors and bug bounty platforms to augment internal efforts.
- Act as the subject matter expert for the HODs and engineering leadership on the evolving threat landscape.
- Oversee the creation of custom scripts and automated offensive tools to scale our testing capabilities.
What we're looking for:
- 5+ years of working experience in related work roles mentioned above.
- Degree in Computer Science, Information Systems, Engineering or equivalent
- Understanding and/or experience working in a Cryptocurrency/Blockchain/Fintech/Finance Trading domain.
- Ability to translate technical security issues into clear actions for executives and engineers.
- Excellent communication, presentation and planning skills.
- Fluent written and spoken English.
- Nice to have:
- Prior experience in a crypto exchange, blockchain company, or high-risk trading platform.
- Relevant certifications: leadership (CISSP, CISM, etc), offensive (OSCP, OSWE, etc), defensive (GSOM, GCIH, etc) and cloud security (CCSP, AWS).
What's in it for you:
- MacBook or high-end laptop for working.
- Full coverage of social insurance.
- Premium health care for you and your family members.
- Full 100% salary during probationary period.
- Working in a professional, friendly, well-equipped workspace with both foreigners and Vietnamese.
- Extensive on job training; will always have chances to work with new emerging technologies.
- Friendly and fun start-up work culture.
Find out more about Coinhako here https://www.coinhako.com/ and don't forget to visit our Careers Page https://www.coinhako.com/join-us
By submitting your application to us, you consent to the collection, use, disclosure and processing of your personal data in accordance with our privacy policy, which is accessible at https://www.coinhako.com/legal/sg-1/privacy_policy.
