Principal Security Operation Engineer

Bybit
Kuala Lumpur
Workplace: RemoteFull timeFunction: Solutions Engineering & Sales EngineeringExperience: 5+ yearsSkills: ["Document writing","Problem analysis","Learning ability","Teamwork","Stress resistance"]

Develop and execute penetration testing, red-blue confrontation drills, and attack/defense exercises to identify security risks across enterprise networks, applications, cloud environments, and core systems. Perform attack surface analysis and threat research, including AI application security evaluation for prompts, RAG, agents, and tool calls. Build and automate red-team tools and security evaluation platforms, publish technical reports, and partner cross-functionally with security, infrastructure, and R&D teams.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Bybit
Bybit
3 months ago

Principal Security Operation Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 1 hour agoStatus: Live

Job Summary

Develop and execute penetration testing, red-blue confrontation drills, and attack/defense exercises to identify security risks across enterprise networks, applications, cloud environments, and core systems. Perform attack surface analysis and threat research, including AI application security evaluation for prompts, RAG, agents, and tool calls. Build and automate red-team tools and security evaluation platforms, publish technical reports, and partner cross-functionally with security, infrastructure, and R&D teams.
Location: Kuala Lumpur
Workplace: Remote
Employment Type: Full time
Job Function: Solutions Engineering & Sales Engineering
Seniority: Mid level

Key Responsibilities

  • •Develop and execute penetration testing and red-blue confrontation drills to simulate real attack scenarios and identify security risks across enterprise networks, applications, and cloud environments.
  • •Lead or participate in attack/defense exercises, evaluating detection, alarm analysis, traceability, emergency response, and recovery.
  • •Conduct attack surface analysis and threat research by tracking threat intelligence, vulnerability exploitation trends, APT methods, and red team toolchain changes.
  • •Perform AI security evaluation for large model applications, including testing for prompt injection, jailbreak, RAG poisoning, data leakage, unauthorized tool invocation, and agent permission escape.
  • •Develop red team tools and automate security evaluation platforms, then generate technical reports and recommendations for mitigation and security rule optimization.

Key Requirements

  • •More than 5 years of experience in red team, penetration testing, security research, or offensive and defensive exercises.
  • •Proficiency in penetration testing/red team processes (information collection, vulnerability scanning/exploitation, intranet penetration, privilege escalation and lateral movement, Data Discovery).
  • •Strong knowledge of cyber security fundamentals (TCP/IP, network architecture, identity/authentication, access control) and common security device configurations.
  • •Experience with offensive tooling and techniques, including red team toolchains such as Sliver, Cobalt Strike, Burp Suite, Metasploit, Nmap, Masscan, Frida, and Impacket.
  • •Programming/scripting capability for tool development and automation (e.g., Python, Go, Bash, PowerShell, JavaScript).
Experience:5+ yearsRed teamPenetration testingEnterprise securityAI security
Skills:Document writingProblem analysisLearning abilityTeamworkStress resistance
Certifications:OSCECISSPCISPCEHCCSP
Languages:English
Tech Stack:SliverCobalt StrikeNPSBurp SuiteMetasploitNmapMasscanFridaImpacketTCP/IPWAFEDRSIEMNDRHIDSZero trustKubernetesMicroservicesContainersPython

Company Brief

Bybit
Operates a cryptocurrency exchange and trading platform offering spot, derivatives, copy trading, and related digital asset services for retail and institutional users. The platform focuses on high-liquidity crypto markets, trading tools, and Web3-related products.
Industry: Trading Platforms
Company Size: Enterprise (1,001+ employees)
Growth: Established Company
Founded: 2018
WebsiteLinkedIn