Ethical Hacking & Red Team Lead

Metrobank; Hinoba-an; On-site; PHP 600,000 - 1,000,000; Full time

Job summary

Metrobank is seeking an experienced security professional to plan, document, and perform penetration testing of network infrastructure and applications, including mobile apps. The role involves stealth testing, collaborating with ITG developers, and establishing red team procedures for exercises.

The candidate will analyze threats, conduct scans, and develop remediation guidance while staying updated on the latest attack methods and security trends.

Qualifications

• Graduate of any college degree in Computer Science or Information Security, Cybersecurity or related technical field.
• Strong understanding of vulnerabilities, common attack vectors and attacker mindset.
• Full knowledge and understanding of OWASP Top 10 Application Security best practices.
• Certification may include SANS GPEN, GWAP, OSCP, CEH or equivalent.
• Technical knowledge and experience in ethical hacking.
• Advanced computer skills - networking fundamentals, forensics, reverse engineering, web apps, databases, wireless technologies.
• Scripting and programming - scripting skills to infiltrate systems.
• Understanding of how breaches disrupt business and financial implications.
• Strong teamwork and collaboration skills; able to lead security initiatives.
• Excellent time management and ability to work in fast-paced environments.

Responsibilities

• Perform threat analysis, wireless network assessments, and social-engineering assessments including physical security assessments to develop test scenarios.
• Conduct network and system security scans. Perform manual and automated hacking techniques on network infrastructure, computer systems, web and mobile applications.
• Evade intrusion prevention systems, intrusion detection systems, firewalls, and honeypots to ensure effectiveness.
• Identify methods and entry points attackers may use to exploit vulnerabilities.
• Develop abuse cases and testing methods; update scripts/tools to enhance testing.
• Discuss findings with IT teams and management; assist in remediation.
• Communicate findings and remediation strategy to stakeholders; prepare reports for technical and executive audiences.
• Review and provide feedback on security fixes; establish improvements for security services.

Skills

Attacker mindset

OWASP Top 10

Ethical hacking

Networking fundamentals

Scripting skills

Education

Bachelor in Computer Science or Information Security

Tools

Penetration testing certifications

Job description

Metrobank is seeking an experienced security professional to plan, document, and perform penetration testing of network infrastructure and applications, including mobile apps. The role involves stealth testing, collaborating with ITG developers, and establishing red team procedures for exercises.

The candidate will analyze threats, conduct scans, and develop remediation guidance while staying updated on the latest attack methods and security trends.