[ref. b39350404] Bedok - Vice President, Red Team (Job ID: 10071356)

You will drive complex Red Team operations, collaborate across threat intelligence and detection engineering teams, and influence strategic improvements in detection and response capabilities across the enterprise.

Red Teaming Responsibilities:

• Lead the design, planning, and execution of sophisticated Red Team engagements simulating advanced persistent threats across global enterprise environments
• Develop and refine Tactics, Techniques, and Procedures (TTPs) aligned with MITRE ATT&CK to challenge and validate detection and response mechanisms
• Conduct advanced adversary emulation, lateral movement, privilege escalation, and persistence operations in diverse environments
• Reverse engineer proof-of-concept exploits and assess their relevance and impact within MUFG’s infrastructure
• Partner with Blue Team, Detection Engineering, and Threat Intelligence to validate findings and enhance detection logic and response workflows
• Deliver clear, actionable reporting of findings, attack paths, and remediation strategies to both technical and executive stakeholders
• Lead the development and maintenance of internal Red Team tools, scripts, and infrastructure to support scalable operations
• Mentor and coach junior Red Team members, fostering a culture of continuous learning and technical excellence
• Stay at the forefront of emerging threats, vulnerabilities, and offensive security methodologies to inform team strategy and tooling

People:

• Act as a role model to team members and adhere to all company policies / guidelines.
• Responsible for assisting team lead to manage (objective setting & performance management) for direct reporting.

Job Requirements:

• Minimum 10 years of experience in information technology and information security with an offensive security discipline
• Offensive security certifications such as OSCP, CRTO, OSEP
• Experience in leading Red Team engagements or advanced penetration testing engagements in complex enterprise environments.
• Bachelor’s degree in Computer Science, Cybersecurity, or a related field
• Deep familiarity with C2 frameworks (e.g., Cobalt Strike, Mythic, Sliver), evasion techniques, and post-exploitation tooling
• Advanced proficiency in scripting or programming languages (e.g., Python, PowerShell, Bash, C/C++)
• Expert-level understanding of Windows and Linux internals, Active Directory, and enterprise network architecture
• Experience with vulnerability research, exploit development, and threat emulation
• Strong knowledge of security frameworks such as MITRE ATT&CK, NIST-CSF, and OWASP
• Demonstrated ability to analyse complex technical threats and develop strategic mitigation plans
• Exceptional communication skills, with the ability to articulate technical findings and business impact to diverse audiences
• Proven experience leading technical teams and mentoring junior staff in a global environment

We regret to inform that only shortlisted applicants will be notified.

Job ID: 10071356