• Enabling teams to integrate the necessary activities and tools into their daily business operations • Be responsible for evaluation of service and creating security reports. • Working with specific teams and providing guidance on how the security finding can be addressed • Working closely with other members of Security community in the organization.

• You will stay on top of advances in AI and how Simbian can use them to make security operations easier, faster, more accurate • You will own the product roadmap for one or more of our AI Agents, and drive it to reality in partnership with Engineering, Design, Marketing, Sales, Founders • You will distill customer feedback and drive solutions • You will co-own GTM with the marketing and sales teams and continuously evolve the best way to land the product in the market • You will track competitors and partners to ensure Simbian’s offerings stay differentiated.

Role Description As a leading financial institution in Egypt, we are heavily investing in localized AI and Machine Learning capabilities to drive innovation while maintaining total data sovereignty. Our Cybersecurity Department is looking for a highly skilled AI Cybersecurity Engineer with a deeply offensive mindset. Operating entirely within our secure, high-performance on-premises infrastructure, you will act as an internal adversary. Your mission is to proactively threat model, simulate advanced cyberattacks (Red Teaming), and manage algorithmic risks to detect and neutralize vulnerabilities in our AI systems before they can be exploited. Key Responsibilities - Predictive AI Threat Modeling: Lead advanced threat-modeling exercises across the bank’s localized AI/ML pipelines, data repositories, and training environments. Anticipate sophisticated attacker behaviors to design preemptive security guardrails before models are moved to production. - AI Red Teaming & Offensive Simulations: Conduct targeted offensive operations and ethical hacking against our on-premises AI infrastructure. Simulate real-world adversarial attacks, including data poisoning, model inversion, membership inference, evasion attacks, and prompt injection. - Framework Mapping with MITRE ATLAS: Implement and operationalize the MITRE ATLAS (Adversarial Threat Landscape for Artificial-Intelligence Systems) framework. Map identified vulnerabilities to ATLAS tactics and techniques to build a robust, AI-specific defensive matrix aligned with traditional MITRE ATT&CK. - On-Premises Infrastructure Hardening: Assess and secure the physical and virtual infrastructure hosting our AI workloads, including bare-metal GPU clusters, local containerized environments (Kubernetes/OpenShift), and private data registries, ensuring strict isolation from external threats. - Proactive Risk Management & Early Detection: Collaborate with the SOC and data engineering teams to build predictive detection use-cases and custom alerts. Identify the early warning signs of an AI-targeted attack or data exfiltration attempt before malicious actors can compromise model integrity. Qualifications - 5+ years of dedicated experience in Offensive Security, Red Teaming, or Advanced Penetration Testing, with a proven pivot and at least 2 years of hands-on experience securing or attacking AI/ML workloads. - Prior experience working within a regulated financial institution in Egypt. Understanding of the security constraints, compliance mandates, and audit rigor required by the Central Bank of Egypt (CBE) for on-premises operations. - Expert-level knowledge of MITRE ATLAS and the OWASP Top 10 for Large Language Models (LLMs). Proven track record of translating these theoretical frameworks into practical, automated offensive playbooks. - Strong proficiency in Python or bash scripting to build custom exploit or testing tools. - Deep understanding of on-premises infrastructure components (Linux administration, private networking, storage area networks). - Direct experience with container security (Docker, Kubernetes) and secure MLOps pipelines. Requirements - Bachelor’s degree in Computer Science, Cybersecurity, Computer Engineering, or a strictly related field. - Highly valued offensive certifications: OSCP, OSCE, CRTP, or GPEN, alongside any specialized AI/ML security credentials. - A relentlessly curious, adversarial mindset balanced with strong risk management disciplines. - The ability to clearly articulate complex, highly technical AI vulnerabilities into actionable remediation plans for data scientists and senior banking executives. - Fluency in English. Benefits - Attractive, market-leading salary package. - Clear career advancement path with professional development opportunities.

Role Description - Responsible for developing and executing penetration testing, red-blue confrontation, and practical attack and defense drills that simulate real attack scenarios, identifying potential security risks in enterprise networks, applications, cloud environments, work networks, and core business systems. - Lead or participate in red-blue confrontation exercises to evaluate the defense team's ability in attack detection, alarm analysis, traceability analysis, emergency response, and recovery. - Based on the real attack chain design exercise scenario, covering: - Extranet breakthrough - Web vulnerability exploitation - Phishing entrance - Privilege escalation - Lateral movement - Data discovery - Privilege maintenance - Defense bypass stages - Combining the attack review results, promote the continuous optimization of security detection rules, response processes, asset governance, and security baselines. - Identify enterprise network exposure, internet assets, cloud assets, APIs, supply chain components, and third-party access risks, evaluate attack paths, and provide mitigation recommendations. - Monitor and collect threat intelligence, track vulnerability exploitation trends, APT attack methods, red team toolchain changes, and apply them to enterprise attack and defense exercises. - Combining business scenarios to model attack paths and discover feasible attack chains from external exposure surfaces to core assets. - Tracking AI-related security risks, including security issues in large-scale model applications, RAG systems, Agent systems, plug-in/tool calls, MCP services, AI code generation, and automated workflows. - Responsible for the security evaluation of AI applications, intelligent agent systems, RAG Knowledge Base, AI Agent toolchain, and model services within the enterprise. - Research and verify large-scale model-related attack techniques, including: - Prompt Injection - Jailbreak - Indirect Prompt Injection - Data leakage - Unauthorized tool invocation - Security risks caused by model illusions - RAG poisoning - Vector library pollution - Sensitive information leakage - Design AI red team test cases and evaluation framework, and conduct security verification on model input and output, context isolation, permission control, tool call chain, and data access boundary. - Participate in the construction of AI security protection plan, including: - Prompt word security policy - Content security detection - Tool call permission constraints - Sensitive data desensitization - Audit tracking - Agent sandbox isolation and security evaluation benchmark construction - Explore the application of AI in red team automation, vulnerability analysis, attack path planning, PoC verification, and report generation, and promote the platformization, automation, and intelligence of attack and defense capabilities. - Develop and optimize Red Team-specific tools and scripts for: - Vulnerability mining - Information collection - Privilege escalation - Lateral movement - Credential analysis - Traffic disguise - Defense bypass - Automated report generation - Research and validate new attack techniques, and simulate real threats in combination with enterprise business scenarios. - Build or participate in the construction of automated security evaluation platform, integrated vulnerability scanning, audio fingerprint recognition, asset mapping, PoC verification, attack path analysis, AI Agent arrangement and other capabilities. - Combining LLM/Agent technology to explore automated penetration testing, intelligent vulnerability verification, code security auditing, and red team task scheduling. - Conduct security evaluations on critical business systems, internal networks, cloud environments, work endpoints, API services, and AI applications, and output detailed technical reports, attack paths, impact analysis, and repair recommendations. - Output AI security evaluation reports for AI applications, including: - Attack examples - Risk levels - Exploitable paths - Data leakage risks - Permission boundary issues - Governance recommendations - Assist in improving enterprise security protection mechanisms, promote optimization of WAF, EDR, SIEM, NDR, HIDS, zero trust, identity permissions, and log auditing capabilities. - Transform attack and defense discovery into security detection rules, baseline specifications, develop security requirements, and continuous governance mechanisms. - Collaborate with the blue team, security operation, infrastructure, R&D, algorithm, data, and business teams to complete attack review, vulnerability repair, detection rule optimization, and security capability building. - Provide security support to other departments of the enterprise, including emergency response drills, development security consulting, AI application pre-launch security review, and security training. - Participate in the security design review of AI applications and security products, and promote the advance of security capabilities in R&D, testing, and Pushonline. Qualifications - Proficient in basic knowledge of cyber security, including TCP/IP protocol, network architecture, identity authentication, access control, principles and configurations of common security devices. - Proficient in common attack techniques and red team toolchains, such as Sliver, Cobalt Strike, NPS, Burp Suite, Metasploit, Nmap, Masscan, Frida, Impacket, etc. - Familiar with mainstream operating systems Windows, Linux, macOS security mechanism, log system, permission model and common use. - Familiar with common web frameworks, API architectures, microservice structures, containers, and security risks in Kubernetes environments. - Proficient in penetration testing and red team processes, including: - Information collection - Vulnerability scanning - Vulnerability exploitation - Intranet penetration - Privilege escalation - Lateral movement - Privilege maintenance - Data discovery - Trace cleaning - Familiar with the working principles and adversarial methods of enterprise-level security products, including WAF, EDR, SIEM, NDR, HIDS, zero-trust gateway, bastion host, and identity authentication system. - Possess independent vulnerability analysis and PoC writing capabilities, able to reproduce, verify, and assess the impact of public vulnerabilities and 0day/1day risks. - Proficient in one or more programming/scripting languages, such as Python, Go, Bash, PowerShell, JavaScript, etc., with experience in tool development and automation platform construction. - Familiar with the basic architecture of large-scale model applications, familiar with technical forms such as Prompt, RAG, Embedding, vector databases, Agent, Function Calling, MCP, plugin systems, etc. - Understand or practice AI security testing methods, including: - Prompt Injection - Jailbreak - RAG data poisoning - Sensitive information leakage - Unauthorized tool invocation - Model output security - Agent permission escape - Able to design security test cases for AI applications, evaluate model input/output, context isolation, data boundaries, permission control, and tool invocation chain risks. - Experience in using AI to assist security work, including: - Vulnerability analysis - Code auditing - Intelligence analysis - Attack path planning - Report generation - Automated testing - Familiar with AI application security governance ideas, including: - Model call auditing - Prompt word security - Sensitive data protection - Content security detection - Permission minimization - Sandbox isolation Requirements - More than 5 years of experience in red team, penetration testing, security research, or offensive and defensive exercises. - Candidates with experience in large-scale enterprise attack and defense drills, red-blue confrontation, HW/major support, cloud attack and defense, or intranet penetration are preferred. - Candidates with experience in AI security, large-scale model security, intelligent agent security, automated penetration testing platform or security tool platform construction are preferred. - Familiar with enterprise security construction system, able to promote defense capability, detection capability, and governance process optimization from an attack perspective. Other capabilities - Priority will be given to those who hold security-related certifications such as P, OSCE, CISSP, CISP, CEH, CISSP, CCSP, etc. - Possess strong document writing and expression abilities, able to output high-quality technical reports, review documents, attack chain analysis, and security construction plans. - Possess good problem analysis ability, learning ability, teamwork ability, and stress resistance. - Be sensitive to new technologies, new attack surfaces, and new tools, and be able to proactively research and share internally. Bonus points - Familiar with Cloud Computing Platform security and cloud attack and defense technologies, such as AWS, Azure, GCP, Tencent Cloud, Alibaba Cloud, etc. - Familiar with Kubernetes, containers, Service Mesh, CI/CD, DevSecOps and supply chain security. - Possess experience in zero trust, secure operation, threat hunting, attack surface management, and vulnerability management platform construction. - Familiar with MCP Server, AI Agent framework, RAG system, vector database, LLM API gateway, model security evaluation framework. - Experience in Automated Red Team, AI Penetration Testing, Intelligent Vulnerability Verification, Agent Orchestration, Security Knowledge Base or Security RAG System Construction. - Experience in vulnerability submission, CVE, technical articles, open source projects, topic sharing, or tool release in the security community. - Familiar with security frameworks such as MITRE ATT&CK, OWASP Top 10, OWASP LLM Top 10, NIST AI RMF, etc. Benefits - Study Growth Fund: We support your professional development and continuous learning. - Internal Events: Participate in regular team-building activities, workshops, and events designed to promote collaboration and innovation. - Global Collaboration: Be part of a diverse, international team, working alongside colleagues from around the world. - Career Advancement: Access opportunities for growth and advancement within a rapidly expanding global company. - Internal Mobility: Grow with us - Your long-term development is important to us. We offer internal job opportunities to help build your career path.