Security Engineer - Red/Blue Team & Pen Testing

Coins.ph; Hong Kong; On-site; HKD 151,000 - 252,000; Full time

Job summary

Coins.ph is seeking a senior security specialist to conduct comprehensive penetration testing across our crypto platforms and cloud environments. You will lead attack-defense exercises, bypass defensive measures for improvement, and research cutting-edge security technologies.

Collaboration with cross-functional teams is essential for scalable protection. The role requires extensive hands-on experience, knowledge of web frameworks, and scripting ability to build automated tools to detect and

Qualifications

• Over 5 years of hands-on attack-and-defence security work.
• Experience with internal network and domain penetration.
• Penetration in AWS cloud, containers, and Kubernetes security.
• Strong knowledge of Linux/Windows, databases and related tech.
• Familiarity with Java/Go/Python web frameworks and code auditing.
• Experience in red and blue team exercises and tooling.
• Ability to script or develop basic exploitation tools.

Responsibilities

• Conduct comprehensive penetration testing on applications and systems.
• Organize regular attack-defense drills with the security team.
• Test by bypassing blue team defenses to improve protection.
• Research offensive/defensive tech and track industry trends.
• Build detection rules, monitoring strategies, and intrusion traceability.

Skills

5+ years experience

Network penetration

AWS cloud security

Linux/Windows security

Web framework security

Red/Blue team exercises

Automation scripting

Job description

Coins.ph is seeking a senior security specialist to conduct comprehensive penetration testing across our crypto platforms and cloud environments. You will lead attack-defense exercises, bypass defensive measures for improvement, and research cutting-edge security technologies.

Collaboration with cross-functional teams is essential for scalable protection. The role requires extensive hands-on experience, knowledge of web frameworks, and scripting ability to build automated tools to detect and