Principal Security Operation Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 3 hours agoStatus: Live

Job Summary

Develop and execute penetration testing, red-blue confrontation drills, and attack/defense exercises to identify security risks across enterprise networks, applications, cloud environments, and core systems. Perform attack surface analysis and threat research, including AI application security evaluation for prompts, RAG, agents, and tool calls. Build and automate red-team tools and security evaluation platforms, publish technical reports, and partner cross-functionally with security, infrastructure, and R&D teams.

Location: Kuala Lumpur

Workplace: Remote

Employment Type: Full time

Job Function: Solutions Engineering & Sales Engineering

Seniority: Mid level

Key Responsibilities

•Develop and execute penetration testing and red-blue confrontation drills to simulate real attack scenarios and identify security risks across enterprise networks, applications, and cloud environments.
•Lead or participate in attack/defense exercises, evaluating detection, alarm analysis, traceability, emergency response, and recovery.
•Conduct attack surface analysis and threat research by tracking threat intelligence, vulnerability exploitation trends, APT methods, and red team toolchain changes.
•Perform AI security evaluation for large model applications, including testing for prompt injection, jailbreak, RAG poisoning, data leakage, unauthorized tool invocation, and agent permission escape.
•Develop red team tools and automate security evaluation platforms, then generate technical reports and recommendations for mitigation and security rule optimization.

Key Requirements

•More than 5 years of experience in red team, penetration testing, security research, or offensive and defensive exercises.
•Proficiency in penetration testing/red team processes (information collection, vulnerability scanning/exploitation, intranet penetration, privilege escalation and lateral movement, Data Discovery).
•Strong knowledge of cyber security fundamentals (TCP/IP, network architecture, identity/authentication, access control) and common security device configurations.
•Experience with offensive tooling and techniques, including red team toolchains such as Sliver, Cobalt Strike, Burp Suite, Metasploit, Nmap, Masscan, Frida, and Impacket.
•Programming/scripting capability for tool development and automation (e.g., Python, Go, Bash, PowerShell, JavaScript).

Experience:5+ yearsRed teamPenetration testingEnterprise securityAI security

Skills:Document writingProblem analysisLearning abilityTeamworkStress resistance

Certifications:OSCECISSPCISPCEHCCSP

Languages:English

Tech Stack:SliverCobalt StrikeNPSBurp SuiteMetasploitNmapMasscanFridaImpacketTCP/IPWAFEDRSIEMNDRHIDSZero trustKubernetesMicroservicesContainersPython

Company Brief

Bybit

Website

Loading job details...

Preparing the role view and application actions.

Bybit

1 month ago

Principal Security Operation Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 3 hours agoStatus: Live

Job Summary

Location: Kuala Lumpur

Workplace: Remote

Employment Type: Full time

Job Function: Solutions Engineering & Sales Engineering

Seniority: Mid level

Key Responsibilities

•Develop and execute penetration testing and red-blue confrontation drills to simulate real attack scenarios and identify security risks across enterprise networks, applications, and cloud environments.
•Lead or participate in attack/defense exercises, evaluating detection, alarm analysis, traceability, emergency response, and recovery.
•Conduct attack surface analysis and threat research by tracking threat intelligence, vulnerability exploitation trends, APT methods, and red team toolchain changes.
•Perform AI security evaluation for large model applications, including testing for prompt injection, jailbreak, RAG poisoning, data leakage, unauthorized tool invocation, and agent permission escape.
•Develop red team tools and automate security evaluation platforms, then generate technical reports and recommendations for mitigation and security rule optimization.

Key Requirements

•More than 5 years of experience in red team, penetration testing, security research, or offensive and defensive exercises.
•Proficiency in penetration testing/red team processes (information collection, vulnerability scanning/exploitation, intranet penetration, privilege escalation and lateral movement, Data Discovery).
•Strong knowledge of cyber security fundamentals (TCP/IP, network architecture, identity/authentication, access control) and common security device configurations.
•Experience with offensive tooling and techniques, including red team toolchains such as Sliver, Cobalt Strike, Burp Suite, Metasploit, Nmap, Masscan, Frida, and Impacket.
•Programming/scripting capability for tool development and automation (e.g., Python, Go, Bash, PowerShell, JavaScript).

Experience:5+ yearsRed teamPenetration testingEnterprise securityAI security

Skills:Document writingProblem analysisLearning abilityTeamworkStress resistance

Certifications:OSCECISSPCISPCEHCCSP

Languages:English

Tech Stack:SliverCobalt StrikeNPSBurp SuiteMetasploitNmapMasscanFridaImpacketTCP/IPWAFEDRSIEMNDRHIDSZero trustKubernetesMicroservicesContainersPython

Company Brief

Bybit

Website