PropertyGuru is Southeast Asia’s leading PropTech company, and the preferred destination for over 32 million property seekers monthly to connect with over 50,000 agents monthly to find their dream home. PropertyGuru empowers property seekers with more than 2.1 million real estate listings, in-depth insights, and solutions that enable them to make confident property decisions across Singapore, Malaysia, Thailand and Vietnam.

Recognised as a Top Employers Certified* organisation, we’re proud to be among the best workplaces in the region—celebrating an inclusive culture of excellence, growth, and well-being.

Role Summary

Leads the enterprise's adversarial security function — owning strategy, team, and outcomes for continuous offensive testing across traditional, cloud, and AI attack surfaces. A player-coach role: sets program direction, builds the red team, and remains technically credible enough to lead and execute complex engagements personally. Operates from an attacker's mindset on a continuous basis — distinct from an AppSec function that validates controls inside the SDLC.

Key Responsibilities

Program leadership & strategy

- Own the offensive strategy, roadmap, and plan; align engagement cadence to the threat model and regulatory obligations.
- Build and develop a multi-disciplinary team of red teamers, AI red teamers, and offensive engineers; set tradecraft, OPSEC, and quality standards.
- Govern rules of engagement, authorization workflows, and engagement-artifact handling as formal, auditable controls.
- Report findings and residual risk to leadership in business-risk terms.

Continuous offensive operations - Lead full-scope adversary emulation mapped to MITRE ATT&CK;, simulating named threat actors relevant to the business and its geographies.

- Direct custom tooling, implants,



and tradecraft to evade modern EDR/XDR, DLP, SIEM, and behavioural detection.
- Run assume-breach assessments measuring lateral movement, blast radius, segmentation, identity hygiene, and detection/containment.
- Lead continuous cloud posture assessments — IAM/privilege-escalation paths, federation, key/secrets management, exposed services, and backup/snapshot exposure — chaining misconfigurations into real exploitation paths.
- Build scenario libraries emulating APTs from recent, real campaigns, refreshing TTPs as the threat landscape evolves.
- Continuously discover and validate the internet-facing footprint — forgotten subdomains, exposed admin panels, leaked credentials, shadow cloud assets, and misconfigured services.

AI & agentic red teaming

- Stand up an AI red team capability: prompt injection (direct/indirect), jailbreak and guardrail-bypass chains, tool/function-call abuse, agent memory and context poisoning, RAG/data-pipeline poisoning, model extraction, inversion, and membership inference.
- Emulate adversaries against agentic and multi-agent deployments — cascading actions, excessive agency, MCP/tool-chain compromise, and agents as a lateral-movement and initial-access vector.
- Operationalize AI threat frameworks (MITRE ATLAS, OWASP Top 10 for LLMs / OWASP ASI, NIST AI RMF) and feed results into detection engineering.

Purple teaming & SOC uplift

- Run a structured purple-team programme:



convert every offensive technique into a detection/response improvement, validate coverage against ATT&CK; and ATLAS, and close telemetry gaps.
- Measure and report mean-time-to-detect / respond improvements driven by offensive findings.

Required Qualifications

- 10+ years in cyber security, 7+ in offensive security with demonstrated red team operations (not solely vulnerability assessment or compliance testing), and 4+ leading offensive teams.
- Proven ability to build and run a continuous offensive / purple-team programme at enterprise scale.
- Deep expertise with C2 frameworks, custom tool development, and detection evasion.
- Strong proficiency in at least one systems/scripting language (Python, Go, C#, C/C++, Rust).
- Expert knowledge of Active Directory / Entra ID attack paths, identity-based attacks, and multi-cloud exploitation.
- Demonstrated experience red teaming LLM-based or agentic AI systems; working knowledge of MITRE ATLAS and the LLM/agentic threat landscape.
- Fluency with MITRE ATT&CK;, threat-informed defense, and purple-team methodology.

Preferred Qualifications

- Recognized offensive certifications (OS CP, OS EP, OSCE3, CRTO, GXPN, or equivalent demonstrated capability).
- Published research, CVEs, conference talks, or open-source tooling contributions.
- Experience in regulated, multi-region enterprise environments (a plus).
- Familiarity with adversarial machine learning, OWASP ASI, and AI red team / automated adversarial-testing harnesses.

Our commitment to you :

- Hybrid versatile working that focuses on outcomes over hours.
- Holistic rewards package covering your financial, physical & mental health.
- Multi-directional career development across all levels.
- I

📌 Senior Manager - Offensive Security (Bengaluru)
🏢 PropertyGuru Pte
📍 Bengaluru