Cyber Security Engineer / Security Research

About the role

We are looking for senior security experts to join our cutting‑edge teams. The opportunities include AI Agent Security Researchers focused on system‑level protection for next‑generation operating systems (including HarmonyOS) and a Red Team Manager to lead offensive simulations for a global payment technology provider.

Key responsibilities

• Design and implement system‑level security mechanisms for AI agents such as dynamic least‑privilege, AI fences, intent‑based sandboxes, and skill isolation.
• Research and mitigate AI/LLM threats including prompt injection, adversarial machine learning, and over‑privileged agents.
• Develop kernel modules and integrate security controls into Android, iOS, Linux, and HarmonyOS platforms.
• Lead a red‑team to conduct nation‑state and financially motivated attack simulations across network, application, cloud, social‑engineering, and physical vectors.
• Manage bug‑bounty programs, red‑team infrastructure, and mentor offensive security talent.
• Translate technical findings into structured risk statements and executive reports, ensuring compliance with regional regulations.

Required profile

• Master’s or PhD in Computer Science, Cybersecurity, or AI security (for research roles).
• 8+ years of offensive security experience with at least 3 years in leadership (for Red Team Manager).
• Proven track record in OS security (Android/iOS/Linux kernel) or financial‑services security.
• Publications, patents, or notable contributions to security research are a plus.

Required skills

• C/C++ and system programming
• Kernel module development
• OS security mechanisms (MAC, kernel hardening, syscall filtering, secure API gateways)
• AI/LLM security risk mitigation
• Android SE, iOS sandbox, Linux security modules, HarmonyOS security frameworks
• Red‑team tooling and cloud‑native attack techniques
• Penetration testing across web, cloud, mobile, API, and internal networks
• Regulatory knowledge (MAS TRM, GDPR, ISO 27001, NIST, PCI DSS, MITRE ATT&CK)