search Browse Jobs
Offensive Security Engineer (Vulnerability Management)KASIKORN Business-Technology Group [KBTG] · Pak Kret, Nonthaburi, Thailand
KASIKORN Business-Technology Group [KBTG] logo

KASIKORN Business-Technology Group [KBTG]

company page ↗

Offensive Security Engineer (Vulnerability Management)

🗓️ Posted 2026-08-31 Pak Kret, Nonthaburi, Thailand Full-time Hybrid ICT
💰 Salary Not shared 📊 Market THB 100,000–THB 170,000/mo

About the Company

The future of banking and beyond Established in 2016, KASIKORN Business-Technology Group is the technology arm of KASIKORNBANK (KBank), one of Thailand's leading commercial banks. The organization consists of eight sub-companies, including K-Tech (a China-based fintech powerhouse) and KBTG Vietnam (extended IT arm and regional one-stop-service solution). By optimizing the capability in each area and collaborating harmoniously as one, KBTG diligently oversees more than 500 applications across KBank's, KBTG's, and K-Group's ecosystems, with a commitment to make finance accessible, convenient, and inclusive for our customers across the region. 𝗥𝘂𝗻 𝘁𝗵𝗲 𝗕𝗮𝗻𝗸 - As one of the first Thai fintech organizations to be established separately from the bank, this spin-off grants KBTG the flexibility to support KBank and K-Group on their digital transformation journey and day-to-day business. One of the projects KBTG is known for is K PLUS (K+), Thailand's number one mobile banking application with over 23 million users across the region. Other than the customer-facing service channels, KBTG manages the bank's overall IT operation, including the core banking system. 𝗖𝗿𝗲𝗮𝘁𝗲 𝘁𝗵𝗲 𝗙𝘂𝘁𝘂𝗿𝗲 - Beyond the force behind KBank's digital banking dominance, KBTG always explores novel ideas to elevate the lives of our customers. We have produced many widely-known and beloved applications such as KhunThong, MAKE by KBank, and MeowJot. Aside from creating innovations, KBTG invests a lot of effort in M.A.D. (Machine Learning, AI, Data) and deep tech research such as blockchain and quantum computing, both independently and collaboratively with renowned institutes like MIT Media Lab. IT Services and IT Consulting Specialties: Information Technology, New Technology (Blockchain, ML, IOT, API, etc.), Fin Tech, Mobile Application, Financial Platforms

Responsibilities

  • ● Company Overview
  • ● KASIKORN Business-Technology Group (KBTG) is a tech arm of KBank. At KBTG, we never cease to develop financial technologies and wide-ranging digital banking services. We are the driving force behind KBank's success, as well as the pioneer of world-class innovations. Utilizing our expertise in fintech, combined with the new generation's outside-the-box thinking, KBTG strives to become the best tech organization of Southeast Asia by 2025.
  • ● Learn more about KBTG: http://www.kbtg.tech
  • ● Position : KASIKORN TECHNOLOGY GROUP SECRETARIAT - Cyber Security Offensive Security Engineer (Longterm Mobility)
  • ● Work Where Wow Happens Every Day.
  • ● Why You'll Love Being Part Of Our Team
  • ● How You'll Make An Impact
  • ● Strong hands-on expertise in red teaming, penetration testing, and vulnerability assessment across web, API, network, cloud, mobile, and LLM environments.
  • ● Proficient with security tools such as Burp Suite, Nmap, Metasploit, Nessus/Qualys, cloud security tools, and manual exploitation techniques beyond automated scanning.
  • ● Solid knowledge of OWASP Top 10, MITRE ATT&CK, modern application architectures, common attack techniques, and vulnerability exploitation/chaining.
  • ● Strong ability to assess and prioritize security risks based on technical severity and business impact, and communicate findings effectively to both engineering teams and executives.
  • ● Ability to develop internal security tools and processes using open-source technologies to improve organizational security capability, efficiency, and productivity.
  • ● What Will Set You Up For Success
  • ● Strong knowledge of Windows/Linux, Active Directory attacks, privilege escalation, cloud security testing (AWS/Azure/GCP), and advanced techniques such as fuzzing, reverse engineering, and basic-to-intermediate binary exploitation.
  • ● Familiarity with DevSecOps and security testing integration, including SAST/DAST, pipeline security, and code-level findings validation, is an advantage.
  • ● Relevant certifications such as OSCP or equivalent are highly preferred; OSEP, OSWE, PNPT, CRTP, CRTO, Pentest+, CEH, CISSP, or CISM are advantageous.
  • ● Bachelor's Degree in Computer Science, Computer Engineering, IT, or a related field, with 2-3 years of experience in penetration testing or offensive security.
  • ● Strong practical portfolio, such as CTF participation, security labs, GitHub projects, or offensive security research; fresh graduates with strong hands-on skills are also encouraged to apply.