Red Team Security Engineer - Penetration Testing & Defense

Coins.ph; Hong Kong; On-site; HKD 152,952 - 229,428; Full time

Job summary

Coins.ph is seeking an experienced security professional to lead penetration testing across its applications and infrastructure in the Philippines.

You will assess blue team defenses, conduct threat research, and help implement scalable security controls such as detection rules and incident tracing. The role demands hands-on expertise, cross-functional collaboration, and a drive to stay ahead of evolving cyber threats.

Qualifications

• 5+ years of hands-on attack and defense experience.
• Experience with internal network and domain penetration with successful cases.
• Practical AWS cloud penetration and container security experience.
• Familiar with Linux/Windows, databases, and privilege escalation techniques.
• Familiar with Java/Go/Python web frameworks and vulnerability mining.

Responsibilities

• Perform comprehensive penetration testing on applications and systems and organize regular attack-defense drills.
• Test and bypass the defense technologies of the blue team to enhance security protections.
• Research offensive and defensive technologies and track industry trends to adopt best-in-class tools.
• Contribute to security capabilities, including detection rules, monitoring strategies, and intrusion traceability.
• Develop countermeasures and TTPs based on threat intelligence and APT behavior models.

Skills

Penetration testing

Red/Blue team exercises

Cloud security (AWS)

Kubernetes security

Linux/Windows administration

Web framework security (Java/Go/Python

Scripting & automation

Threat intelligence & tooling

Internal network & domain penetration

Tools

AWS

Kubernetes

Job description

Coins.ph is seeking an experienced security professional to lead penetration testing across its applications and infrastructure in the Philippines.

You will assess blue team defenses, conduct threat research, and help implement scalable security controls such as detection rules and incident tracing. The role demands hands-on expertise, cross-functional collaboration, and a drive to stay ahead of evolving cyber threats.