Coinhako

Senior/Lead Security Engineer, Red team

Ho Chi Minh, Ho Chi Minh, VietnamFull timeLeadPosted 16 days ago
Apply on Coinhako →

Sign into see who you know at Coinhako.

We are seeking a dedicated and hands-on Lead Security Engineer to spearhead our Red Team and Offensive Security initiatives. In this role, you won't just be running scans; you will be the primary architect of our adversarial simulation strategy, taking full ownership of penetration testing, red teaming, and the emerging frontier of AI Security.

What you'll be doing:

- Strategic Red Teaming & Pentesting

- Define, execute, and manage the annual offensive security roadmap, including internal and external penetration tests.

- Design complex red team campaigns that simulate real-world TTPs (Tactics, Techniques, and Procedures) to test our detection and response capabilities.

- Beyond discovery, you will partner with engineering teams to provide actionable remediation guidance and validate fixes.

- AI Security Initiative

- Lead security assessments for AI/ML deployments, focusing on prompt injection, data poisoning, model inversion, and membership inference attacks.

- Integrate AI-specific security frameworks (e.g., OWASP Top 10 for LLMs, MITRE ATLAS) into our standard security lifecycle.

- Develop specialized playbooks for "jailbreaking" and stress-testing our proprietary AI agents and infrastructure.

- Leadership & Mentorship

- Evaluate and select third-party security vendors and bug bounty platforms to augment internal efforts.

- Act as the subject matter expert for the HODs and engineering leadership on the evolving threat landscape.

- Oversee the creation of custom scripts and automated offensive tools to scale our testing capabilities.

What we're looking for:

- 5+ years of working experience in related work roles mentioned above.

- Degree in Computer Science, Information Systems, Engineering or equivalent

- Understanding and/or experience working in a Cryptocurrency/Blockchain/Fintech/Finance Trading domain.

- Ability to translate technical security issues into clear acti...