Coinhako is hiring a Senior/Lead Security Engineer, Red team in Security — Vietnam. The overview below is synthesized from the employer posting on jobs.ashbyhq.com: factual requirements and scope are preserved, but prose is rewritten with editorial context. Verify details and apply via the employer link.
The listing frames the Senior/Lead Security Engineer, Red team at Coinhako as a hands-on product role. In this role, you won't just be running scans; you will be the primary architect of our adversarial simulation strategy, taking full ownership of penetration testing, red teaming, and the emerging frontier of AI Security.
What you'll be doing
- Strategic Red Teaming & PentestingDefine, execute, and manage the annual offensive security roadmap, including internal and external penetration tests.Design complex red team campaigns that simulate real-world TTPs (Tactics, Techniques, and Procedures) to test our detection and response capabilities.Beyond discovery, you will partner with engineering teams to provide actionable remediation guidance and validate fixes.
- AI Security InitiativeLead security assessments for AI/ML deployments, focusing on prompt injection, data poisoning, model inversion, and membership inference attacks.Integrate AI-specific security frameworks (e.g., OWASP Top 10 for LLMs, MITRE ATLAS) into our standard security lifecycle.Develop specialized playbooks for "jailbreaking" and stress-testing our proprietary AI agents and infrastructure.
- Leadership & MentorshipEvaluate and select third-party security vendors and bug bounty platforms to augment internal efforts.Act as the subject matter expert for the HODs and engineering leadership on the evolving threat landscape.Oversee the creation of custom scripts and automated offensive tools to scale our testing capabilities.
What we're looking for
- 5+ years of working experience in related work roles mentioned above.
- Degree in Computer Science, Information Systems, Engineering or equivalent
- Understanding and/or experience working in a Cryptocurrency/Blockchain/Fintech/Finance Trading domain.
- Ability to translate technical security issues into clear actions for executives and engineers.
- Excellent communication, presentation and planning skills.
- Fluent written and spoken English.Nice to have:Prior experience in a crypto exchange, blockchain company, or high-risk trading platform.Relevant certifications: leadership (CISSP, CISM, etc), offensive (OSCP, OSWE, etc), defensive (GSOM, GCIH, etc) and cloud security (CCSP, AWS).
What’s in it for you
- MacBook or high-end laptop for working.
- Full coverage of social insurance.
- Premium health care for you and your family members.
- Full 100% salary during probationary period.
- Working in a professional, friendly, well-equipped workspace with both foreigners and Vietnamese.
- Extensive on job training; will always have chances to work with new emerging technologies.
- Friendly and fun start-up work culture.
Find out more about Coinhako herehttps://www.coinhako.com/ and don't forget to visit our Careers Pagehttps://www.coinhako.com/join-us
By submitting your application to us, you consent to the collection, use, disclosure and processing of your personal data in accordance with our privacy policy, which is accessible at https://www.coinhako.com/legal/sg-1/privacy_policy.
Build a standout application
For the Senior/Lead Security Engineer, Red team at Coinhako, reviewers look for concise evidence over buzzwords. Mirror the language of the posting sparingly, quantify support or delivery outcomes, and show how you handled ambiguity, time-zone collaboration and user empathy. Keep your resume to impact, keep your cover note to one page, and link to artifacts — tickets resolved, docs shipped, dashboards owned — that prove you can operate in a fast-moving Web3 team. Prepare to discuss a time you turned a confusing user report into a clear fix and how you measure quality in support and operations.
Web3 hiring values reliability: on-time follow-through, clear writing, and a track record of improving runbooks and tooling. Treat the application as a work sample. For interviews, be ready to walk through how you prioritize across time zones, handle a difficult user, and decide when to escalate versus resolve directly. Show how you document decisions so the next teammate benefits.
In a distributed Web3 org, trust builds through written clarity. Use the cover note to demonstrate it.