Junior Offensive Security Engineer

kinosec.ai; Philippines; On-site; PHP 420,000 - 660,000; Full time

Benefits offered by this job

Philippine statutory benefits

Mentorship from award-winning hackers

Certification and training support

Hands-on work on live AI pentesting

Trips to US office possible

Job summary

KinoSec, a cutting-edge autonomous offensive security startup in the Philippines, is seeking a passionate learner to join the team. You will work on our continuous learning technology, applying hacking skills and research to improve the platform with every engagement.

No prior experience is required; enthusiasm and quick learning are valued, as you contribute to pentesting across Zeus and Poseidon, while building small automation tools.

Qualifications

• Living in the Philippines and able to work full-time from our office.
• Willing to work a US time shift: 7:00 PM to 4:00 AM Philippine time.
• No prior experience required; passion for hacking matters more than resume.
• Comfortable in a fast-moving startup with shifting priorities.
• Eagerness to keep learning as the platform evolves.
• Familiarity with Active Directory and common AD attacks is a plus.
• Basic familiarity with web app vulnerabilities (OWASP Top 10) and tools such as Burp Suite.

Responsibilities

• Work hands-on with KinoSec's continuous learning technology to sharpen the platform after each engagement.
• Contribute your hacking skills and research to help KinoSec learn from outcomes.
• Test the platform against new targets and techniques and help close gaps.
• Keep KinoSec updated as new vulnerabilities, CVEs, and attack techniques emerge.
• Support authorized pentests across Zeus and Poseidon platforms.
• Validate and reproduce vulnerabilities before they reach customers.
• Document findings with clear proof of concept, impact, and remediation.
• Build small automation tools in Python, Bash, or Go to speed up your work.

Skills

Passion for hacking

Self-learning

English writing

Team player

Ethical hacking

Tools

Burp Suite

BloodHound

Impacket

NetExec

Responder

Mimikatz

Rubeus

Go/Python scripting

Job description

Join KinoSec and help our continuous learning technology get sharper with every target it meets.

About KinoSec

KinoSec is an autonomous offensive security platform built by hackers. We cover both the external and internal attack surface through two products: Zeus for web apps (including AI-generated and vibe-coded apps), APIs, and cloud, and Poseidon for external and internal network pentesting, including Active Directory and OT/ICS. KinoSec scored 99.04% effectiveness against human pentesters on black-box testing. Our team took 1st place at the DEF CON 34 Hack The Box CTF, and KinoSec was named Most Innovative Company of the Year at the Asia CEO Awards 2026.

Our mission: stop the upcoming cyber doomsday by creating the most realistic Skynet-level AI hacker that empowers organizations to hack themselves before the bad guys do.

About the role

You’ll report to our Chief Hacking Officer and work on the heart of KinoSec: our continuous learning technology, the part of the platform that keeps getting better at hacking over time. Your skills, research, and findings help it learn faster and hit harder. Experience is not required. We want someone passionate about hacking who enjoys a fast-moving startup and is excited to learn on the job.

What you'll do

• Work hands-on with KinoSec's continuous learning technology to make the platform sharper with every engagement
• Bring your hacking skills and research into the platform so what you know, KinoSec learns
• Challenge the platform with new targets and techniques, find where it falls short, and help close the gaps
• Keep KinoSec current as new vulnerabilities, CVEs, and attack techniques emerge
• Support authorized pentests across Zeus (web apps, APIs, cloud) and Poseidon (external and internal networks, Active Directory, OT/ICS)
• Validate and reproduce vulnerabilities before they reach customers
• Write clear findings with proof of concept, impact, and remediation
• Build small tools in Python, Bash, or Go to automate your work

What we're looking for

• Must be currently living in the Philippines and able to work full-time from our office
• Able to work a US time shift: 7:00 PM to 4:00 AM Philippine time
• No prior experience required. Passion for hacking matters more than your resume
• Comfortable in a fast-moving startup where priorities can shift quickly (we’ll support you as you ramp up)
• A hunger to keep learning, because the platform you work on never stops
• Familiarity with Active Directory and common AD attacks such as enumeration, Kerberoasting, AS-REP roasting, NTLM relay, ACL abuse, delegation abuse, and lateral movement (from labs, CTFs, or self-study is fine)
• Basic familiarity with web application vulnerabilities (OWASP Top 10, common API flaws) and tools such as Burp Suite, or willingness to learn
• Basic knowledge of networking, Linux, and Windows
• Exposure to, or willingness to learn, tools such as BloodHound, Impacket, NetExec, Responder, Rubeus, and Mimikatz
• Basic scripting in Python or PowerShell, or eager to learn
• Clear written English for findings and reports
• Strong ethics and a clear understanding of authorized testing

Nice to have

• CRTO, CRTP, CPTS, OSCP, PNPT, or eJPT (or working toward one)
• Active Hack The Box (including Pro Labs) or TryHackMe profile, or CTF rankings
• Bug bounty findings or CVEs credited to you
• Experience with internal networks or OT/ICS environments
• Familiarity with LLMs, AI agents, or AI red teaming
• A blog, GitHub, or write-ups that show how you think

Benefits

• All Philippine statutory benefits: SSS, PhilHealth, Pag-IBIG, 13th month pay, holiday pay, night differential pay, service incentive leave, and statutory leaves
• Mentorship from award-winning hackers
• Certification and training support
• Hands-on work on a live AI pentesting platform used by paying customers
• Eligibility for periodic trips to our US office to work alongside the US team

• KinoSec is an equal opportunity employer. We hire for skill, curiosity, and character, regardless of background.