Senior/Lead Security Engineer, Red team

We are seeking a dedicated and hands-on Lead Security Engineer to spearhead our Red Team and Offensive Security initiatives. In this role, you won't just be running scans; you will be the primary architect of our adversarial simulation strategy, taking full ownership of penetration testing, red teaming, and the emerging frontier of AI Security.

What you'll be doing:

Strategic Red Teaming & Pentesting

Define, execute, and manage the annual offensive security roadmap, including internal and external penetration tests.

Design complex red team campaigns that simulate real-world TTPs (Tactics, Techniques, and Procedures) to test our detection and response capabilities.

Beyond discovery, you will partner with engineering teams to provide actionable remediation guidance and validate fixes.

AI Security Initiative

Lead security assessments for AI/ML deployments, focusing on prompt injection, data poisoning, model inversion, and membership inference attacks.

Integrate AI-specific security frameworks (e.g., OWASP Top 10 for LLMs, MITRE ATLAS) into our standard security lifecycle.

Develop specialized playbooks for "jailbreaking" and stress-testing our proprietary AI agents and infrastructure.

Leadership & Mentorship

Evaluate and select third-party security vendors and bug bounty platforms to augment internal efforts.

Act as the subject matter expert for the HODs and engineering leadership on the evolving threat landscape.

Oversee the creation of custom scripts and automated offensive tools to scale our testing capabilities.

What we're looking for:

5+ years of working experience in related work roles mentioned above.

Degree in Computer Science, Information Systems, Engineering or equivalent

Understanding and/or experience working in a Cryptocurrency/Blockchain/Fintech/Finance Trading domain.

Ability to translate technical security issues into clear actions for executives and engineers.

Excellent communication, presentation and planning skills.

Fluent written and spoken English.

Nice to have:

Prior experience in a crypto exchange, blockchain company, or high-risk trading platform.

Relevant certifications: leadership (CISSP, CISM, etc), offensive (OSCP, OSWE, etc), defensive (GSOM, GCIH, etc) and cloud security (CCSP, AWS).

What’s in it for you:

MacBook or high-end laptop for working.

Full coverage of social insurance.

Premium health care for you and your family members.

Full 100% salary during probationary period.

Working in a professional, friendly, well-equipped workspace with both foreigners and Vietnamese.

Extensive on job training; will always have chances to work with new emerging technologies.

Friendly and fun start-up work culture.

Find out more about Coinhako here https://www.coinhako.com/ and don't forget to visit our Careers Page https://www.coinhako.com/join-us

By submitting your application to us, you consent to the collection, use, disclosure and processing of your personal data in accordance with our privacy policy, which is accessible at https://www.coinhako.com/legal/sg-1/privacy_policy .