PropertyGuru is Southeast Asia’s leading PropTech company, and the preferred destination for over 32 million property seekers monthly to connect with over 50,000 agents monthly to find their dream home. PropertyGuru empowers property seekers with more than 2.1 million real estate listings, in-depth insights, and solutions that enable them to make confident property decisions across Singapore, Malaysia, Thailand and Vietnam.
PropertyGuru.com.sg was launched in Singapore in 2007 and since then, PropertyGuru Group has made the property journey a transparent one for property seekers in Southeast Asia. In the last 18 years, PropertyGuru has grown into a high-growth PropTech company with a robust portfolio including leading property marketplaces and award-winning mobile apps across its markets in Singapore, Malaysia, Vietnam, Thailand as well as the region’s biggest and most respected industry recognition platform – PropertyGuru Asia Property Awards , events and publications across Asia.
For more information, please visit: PropertyGuruGroup.com ; PropertyGuru Group on LinkedIn .
Recognised as a Top Employers Certified* organisation, we’re proud to be among the best workplaces in the region—celebrating an inclusive culture of excellence, growth, and well-being.
Leads the enterprise's adversarial security function — owning strategy, team, and outcomes for continuous offensive testing across traditional, cloud, and AI attack surfaces. A player-coach role: sets program direction, builds the red team, and remains technically credible enough to lead and execute complex engagements personally. Operates from an attacker's mindset on a continuous basis — distinct from an AppSec function that validates controls inside the SDLC.
Program leadership & strategy
Build and develop a multi-disciplinary team of red teamers, AI red teamers, and offensive engineers; set tradecraft, OPSEC, and quality standards.
Govern rules of engagement, authorization workflows, and engagement-artifact handling as formal, auditable controls.
Continuous offensive operations
Move from point-in-time pen testing to continuous, attacker-mindset testing across network, identity, cloud (AWS/Azure/GCP), application, and social-engineering vectors.
Direct custom tooling, implants, and tradecraft to evade modern EDR/XDR, DLP, SIEM, and behavioural detection.
Run assume-breach assessments measuring lateral movement, blast radius, segmentation, identity hygiene, and detection/containment.
Lead continuous cloud posture assessments — IAM/privilege-escalation paths, federation, key/secrets management, exposed services, and backup/snapshot exposure — chaining misconfigurations into real exploitation paths.
Continuously discover and validate the internet-facing footprint — forgotten subdomains, exposed admin panels, leaked credentials, shadow cloud assets, and misconfigured services.
Stand up an AI red team capability: prompt injection (direct/indirect), jailbreak and guardrail-bypass chains, tool/function-call abuse, agent memory and context poisoning, RAG/data-pipeline poisoning, model extraction, inversion, and membership inference.
Emulate adversaries against agentic and multi-agent deployments — cascading actions, excessive agency, MCP/tool-chain compromise, and agents as a lateral-movement and initial-access vector.
Purple teaming & SOC uplift
Strong proficiency in at least one systems/scripting language (Python, Go, C#, C/C++, Rust).
Recognized offensive certifications (OS CP, OS EP, OSCE3, CRTO, GXPN, or equivalent demonstrated capability).
Our commitment to you:
Hybrid flexible working that focuses on outcomes over hours.
Holistic rewards package covering your financial, physical & mental health.
Multi-directional career development across all levels.
Inclusive benefits like equal paternity leave, supporting all employees in work-life balance.
At PropertyGuru, you’ll be part of a Top Employers Certified* company that puts people at the heart of everything we do.
