Security Engineer （Penetration Testing-Red Team）

Coins.ph; Hong Kong; On-site; HKD 152,952 - 229,428; Full time

Job summary

Coins.ph is seeking an experienced security professional to lead penetration testing across its applications and infrastructure in the Philippines.

You will assess blue team defenses, conduct threat research, and help implement scalable security controls such as detection rules and incident tracing. The role demands hands-on expertise, cross-functional collaboration, and a drive to stay ahead of evolving cyber threats.

Qualifications

• 5+ years of hands-on attack and defense experience.
• Experience with internal network and domain penetration with successful cases.
• Practical AWS cloud penetration and container security experience.
• Familiar with Linux/Windows, databases, and privilege escalation techniques.
• Familiar with Java/Go/Python web frameworks and vulnerability mining.

Responsibilities

• Perform comprehensive penetration testing on applications and systems and organize regular attack-defense drills.
• Test and bypass the defense technologies of the blue team to enhance security protections.
• Research offensive and defensive technologies and track industry trends to adopt best-in-class tools.
• Contribute to security capabilities, including detection rules, monitoring strategies, and intrusion traceability.
• Develop countermeasures and TTPs based on threat intelligence and APT behavior models.

Skills

Penetration testing

Red/Blue team exercises

Cloud security (AWS)

Kubernetes security

Linux/Windows administration

Web framework security (Java/Go/Python

Scripting & automation

Threat intelligence & tooling

Internal network & domain penetration

Tools

AWS

Kubernetes

Job description

Join the Pioneer Crypto Brand in the Philippines! Coins is the most established crypto brand in The Philippines and has gained the trust of more than 18 million users. Through the easy-to-use mobile app, users can buy and sell a variety of different cryptocurrencies and access a wide range of financial services.
Coins is fully regulated by the Bangko Sentral ng Pilipinas (BSP) and is the first ever crypto-based company in Asia to hold both Virtual Currency and Electronic Money Issuer licenses from a central bank.

Job Responsibilities：

• Conduct comprehensive penetration testing on company applications and systems, and organize regular attack-defense drills
• Test and bypass the defense technologies of the company's blue team to enhance the security protection level
• Research offensive and defensive technologies, track and analyze cutting-edge industry technologies, and introduce excellent security technologies and tools
• Participate in the construction of security capabilities, including detection rules, monitoring strategies, and intrusion traceability
• Build and drill countermeasures and TTPs (Tactics, Techniques, and Procedures) based on real threat intelligence and industry APT behavior models

Requirements

• Possess more than 5 years of practical experience in attack and defense, and be able to independently complete penetration testing work
• Familiar with common internal network attack ideas and methods, have internal network penetration and domain penetration capabilities with successful cases
• Have practical experience in AWS cloud environment penetration, container and Kubernetes security attack and defense
• Familiar with Linux/Windows system principles, databases and related technologies, and proficient in command execution and privilege escalation techniques
• Familiar with mainstream Web frameworks and capable of code auditing and vulnerability mining (java/go/python)
• Have practical experience in red and blue team exercises
• Be able to write scripts or tools for automated exploitation and basic tool development

Meaningful Collaborations - The successful candidate will work cross-functionally with other relevant teams to carry out implementations that will improve and create an impact on customer experience.
Scalable Growth - Be part of a fast-growing organization with the vision to expand its territories outside APAC which will provide opportunities for career advancement.
A Space For Bright Ideas - Let your bright ideas be converted into meaningful changes! Coins culture welcomes new ideas backed up by data to create an impact.
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.