Red Team Analyst (AVP)

About OCBC

Established in 1932, OCBC is Singapore's longest standing bank, committed to helping individuals and businesses realize their goals by delivering tailored support, services, and career development opportunities. The bank is undergoing a digital transformation aimed at becoming a future-ready learning organization with the goal of being Asia's leading financial services partner focused on sustainability.

Joining OCBC means contributing to innovative financial service delivery in collaborative, supportive teams, building community value, and advancing personal and professional growth in a dynamic environment.

Role Overview

The Red Team Analyst role is a critical position within OCBC's Cybersecurity team tasked with planning and performing adversary simulation exercises aimed at identifying vulnerabilities in the bank's IT infrastructure. This role collaborates with Threat Intelligence, Threat Hunting, SOC, and Detection Engineering teams to conduct offensive security assessments that align with regulatory requirements while continually enhancing red team methodologies.

Key Responsibilities

• Plan and conduct red team engagements simulating attacker actions on enterprise and banking-critical systems.
• Develop attack scenarios and tactics mapped to the MITRE ATT&CK framework, informed by up-to-date threat intelligence relevant to financial services.
• Create and maintain Rules of Engagement, scoping documents, and exercise plans, ensuring appropriate controls and data protocols are followed.
• Execute reconnaissance, initial system access, lateral movement, and post-exploitation activities during controlled engagements while meticulously documenting findings.
• Work closely with Threat Hunting and Detection Engineering teams to verify detection capabilities and support purple team initiatives.
• Prepare clear, actionable reports for both technical staff and management, including risk evaluations, root cause analyses, and remediation advice.
• Support regional security engagements across diverse jurisdictions by coordinating with stakeholders and managing logistical requirements.
• Drive the continuous improvement of red team processes, tools, and playbooks.
• Stay informed about emerging attacks, tools, and tactics pertinent to the banking sector and financial services.

Candidate Profile

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, or related discipline.
• At least 5 years of practical experience in red teaming, penetration testing, or offensive security, preferably within regulated industries such as financial services.
• Proficient understanding of MITRE ATT&CK framework and adversary emulation methodologies.
• Hands-on experience with red team tools including C2 frameworks, exploitation tools, OSINT utilities, and scripting languages such as Python or PowerShell for automation.
• Comprehensive knowledge of enterprise architecture including Active Directory, cloud environments (AWS, Azure, GCP), and network security fundamentals.
• Experienced in designing or managing engagements with formal Rules of Engagement and multiple stakeholder coordination.
• Strong communication skills capable of translating complex technical details to non-technical audiences.
• Familiarity with relevant regulatory standards like MAS TRM, BNM RMiT, HKMA, and CSA CCoP is advantageous.
• Possesses security certifications such as OSCP, OSCE, CRTP, CRTE, CRTO, GXPN, or equivalents is preferred.
• Prior involvement in banking, payment systems, or critical financial infrastructure environments.
• Experience in purple team exercises and working in collaboration with detection engineering teams.

Benefits and Culture

OCBC provides a competitive compensation package along with a comprehensive collection of flexible, lifestyle-friendly benefits. The organization emphasizes community engagement and offers outstanding learning and professional development opportunities. Employee wellbeing, personal growth, and aspirations are valued alongside customer needs.