Advanced Security Validation Engineer (Purple Team)

Company Overview

KASIKORN Business-Technology Group (KBTG) is a tech arm of KBank. At KBTG, we never cease to develop financial technologies and wide-ranging digital banking services. We are the driving force behind KBank's success, as well as the pioneer of world-class innovations. Utilizing our expertise in fintech, combined with the new generation's outside-the-box thinking, KBTG strives to become the best tech organization of Southeast Asia by 2025.

Learn more about KBTG:

Work Where Wow Happens Every Day.

Why You’ll Love Being Part of Our Team:

Join KBTG – where innovation drives impact! With a purposeful mission, collaborative spirit, and a positive attitude, we create fintech solutions that empower. Be part of the future!

How You’ll Make an Impact:

• Research current attack techniques, threat-actor TTPs, and emerging risks, and use them as the basis for building realistic test scenarios.

• Develop and evolve test scenarios mapped to MITRE ATT&CK to discover new gaps in existing security controls.

• Understand how security controls operate across domains (endpoint, network, identity, email, cloud), and design the processes to assess, test, and measure their effectiveness.

• Work with the Blue Team to measure the detection effectiveness of security tools (e.g., EDR, SIEM, SSE), including detection coverage, alert fidelity, and time to detect, and help tune detections where gaps are found.

• Analyze how security-control products behave and understand their configuration baselines, validating that controls are deployed and tuned effectively.

• Assess technical risk and the business impact arising from security-control gaps, track remediation and advise control owners and engineering teams on closing identified gaps.

• Produce evidence-based reports, document test methodology, evidence, results, and control gaps in a clear and reproducible manner, so findings can be independently reviewed and re-tested by the relevant teams.

• Develop and customize open-source tools and scripts, and use AI to support research, analysis, and reporting, raising the quality, repeatability, and measurability of testing.

What Will Set You Up for Success:

• Solid working knowledge of the OWASP Top 10 and the MITRE ATT&CK framework, with the ability to apply them to real validation work.

• Understanding of security-control functionality across multiple layers, with the ability to design assessment, testing, and measurement methodology.

• Ability to assess technical risk and translate control gaps into clear impact statements and remediation guidance.

• Hands-on ability to build and adapt tooling and scripts for testing and measurement.

• Ability to analyze security-control products and interpret their configuration baselines.

• Proficiency in using AI tools to support day-to-day work such as research, scripting, analysis, and reporting, while validating AI output and handling data responsibly.

• A self-directed learner who researches, investigates, and upskills independently.

Embracing IDEA (Inclusion, Diversity, Equity, and Accessibility):

At KBTG, diversity fuels innovation. We embrace different perspectives, foster an inclusive culture, and create opportunities for growth. Be yourself, make an impact, and grow with us. Join us.

Rewards That Go Beyond the Paycheck:

• Competitive Provident Fund – Secure your future with high contributions.

• Financial Wellness – Expert support and tools for managing finances, including home loans.

• Comprehensive Health Coverage – Enjoy peace of mind with top-tier health insurance and annual health check-ups for you, your spouse, and your children.

• Flexible Benefits – Customize your perks with generous policies, including support for work-from-home equipment, wellness, and more.

• Wellness & Comfort – Recharge in our Nap Room, enjoy occasional massages, and access mental wellness support via Occa.

• Business Travel & Commuting Support – Enjoy Grab for Business rides and other travel perks for professional journey with ease and convenience.

• Continuous Learning – Access Udemy, Coursera, and top training programs.

• K Point Reward – Earn points and enjoy exciting rewards as you grow with us.

#LI-AC1