Senior Engineer - IT Security (Red Team Operations)

Join Commercial Bank of Ceylon, one of the most respected banks where your career grows, your work creates impact, and you become your best self. We are seeking an experienced cybersecurity professional to join our IT Security team focusing on Red Team Operations.

Position Summary

• Role: Senior Engineer – IT Security (Red Team Operations)

• Institution: Commercial Bank of Ceylon PLC

• Location: Sri Lanka

• Employment Type: Full-Time

Key Responsibilities

• Design and execute end-to-end red team engagements, covering all the stages of the cyber kill chain from initial access to data exfiltration.

• Develop "Threat Playbooks" based on real-world intelligence (TI) relevant to the banking sector and automate these simulations using Breach and Attack Simulation (BAS) tools to ensure continuous validation of security controls.

• Ensure offensive operations validate the effectiveness of controls defined by various compliance and regulatory bodies (e.g., PCI DSS, ISO 27001, CBSL, SWIFT, NIST CSF, etc.).

Candidate Qualifications & Requirements

• Education: Bachelor’s Degree in Information Technology, Computer Science (specializing in Information Security), or Cyber Security.

• Experience: Minimum of 5+ years of experience in Offensive Security, including at least 3 years focused on Red Team Operations or Advanced Penetration Testing.

• Professional Certifications: IT and IT security-related professional qualifications such as OSCE, OSCP, GRTP, CEH, eJPT, SSCP, ISACA CSXP, or GSEC will be an added advantage.

• Technical Proficiency: Hands-on experience with frameworks and tools such as Cobalt Strike, Metasploit, Havoc, or Brute Ratel.

How to Apply

• Interested candidates are invited to apply through the official corporate website.

• Application Portal: www.combanks.lk > Careers > Open Positions > Senior Engineer – IT Security (Red Team Operations)