A

Ajaib

Online multi-asset trading for retail investors

Offensive Security Engineer/Lead

Offensive Security & TestingConfirmed live in the last 24 hours
Full-timeJakarta, Indonesia

About the Job

Requirements

  • At least 8 years of dedicated technical experience in offensive security, ethical hacking, or penetration testing, including at least 2 years leading a red team or offensive security function.
  • Demonstrate mastery of the MITRE ATT&CK matrix for Enterprise, Cloud, and Mobile, and deep conceptual understanding of the Lockheed Martin Cyber Kill Chain methodology.
  • Be proficient with commercial and open-source offensive security tools, including Cobalt Strike, Burp Suite, and Metasploit, and have deep familiarity with cloud-native security environments such as AWS, GCP, or Azure.
  • Have strong scripting and programming skills in languages such as Python, Go, PowerShell, or Bash to automate attacks, bypass security controls, and develop custom exploits.
  • Have exceptional communication skills and a track record of explaining complex attack vectors and business impacts to technical engineers and non-technical business executives.

Responsibilities

  • Define the strategy, scope, and execution roadmap for enterprise-wide penetration testing, red teaming, and adversary simulation exercises.
  • Design and execute complex, multi-stage red team operations that emulate real-world threat actors and advanced persistent threats, mapping techniques to the MITRE ATT&CK framework.
  • Evaluate the security posture across every phase of the Lockheed Martin Cyber Kill Chain, from reconnaissance to actions on objectives, and identify gaps in boundary defenses and internal monitoring.
  • Partner with the Blue Team, including SOC and Incident Response, to conduct Purple Team exercises and use simulation data to refine detection engineering, SIEM alerts, and response playbooks.
  • Safely exploit vulnerabilities across network infrastructure, cloud environments, and applications, then prepare actionable, risk-prioritized remediation reports for engineering teams.
  • Oversee the development, deployment, and safe operation of proprietary offensive security tools, scripts, and command-and-control frameworks.

Desired Qualifications

  • Possess advanced offensive security certifications such as OSCE, OSEP, OSWE, GXPN, or CRTO (Certified Red Team Operator).

About the Company

Ajaib

Online multi-asset trading for retail investors

Ajaib is an online multi-asset investment platform in Indonesia that lets retail users trade local and global stocks, mutual funds, bonds, cryptocurrencies, and stablecoins through ajaib.co.id. It enables account sign-up, funding, and then placing trades in a single web or mobile app, with brokerage, order execution, and custody handled by the platform. It differentiates itself by offering a broad range of assets with low or no minimum deposits and a beginner-friendly experience on one Indonesian platform that also connects users to global markets and crypto, backed by substantial funding and a strategic SBI investment. Its goal is to expand financial access for millions of Indonesian retail investors and grow its product offering and partnerships to deepen digital-finance and crypto capabilities.

Company size
501-1,000
Company stage
Series C
Total funding
$515.2M
Headquarters
Jakarta, Indonesia
Founded
2018

Recently Posted Jobs

Explore more opportunities at Ajaib

See more jobs