Lead Offensive Security Engineer

Metropolitan Bank & Trust Company; Metro Manila; On-site; PHP 1,200,000 - 2,400,000; Full time

Job summary

Metrobank is seeking an Offensive Security Engineer Lead to perform penetration testing, ethical hacking, and red team exercises across networks, web and mobile apps, and other critical systems.

You will collaborate with IT and development teams to validate remediation measures, strengthen security controls, and advance the bank's overall cybersecurity posture through proactive assessments and continuous improvement initiatives.

Qualifications

• Bachelor's degree in CS/InfoSec or related field.
• Certifications such as OSCP, GPEN, CEH are an advantage.
• Hands-on experience in penetration testing and ethical hacking.

Responsibilities

• Plan, develop, and execute penetration testing engagements and red team exercises.
• Conduct threat analysis and simulate real-world attack scenarios.
• Identify vulnerabilities and attack paths using manual and automated testing.
• Assess the effectiveness of security controls like firewalls and IDS/IPS.
• Develop testing methodologies, abuse cases, and scripts to enhance testing.
• Document findings and communicate remediation recommendations to stakeholders.
• Partner with IT and development teams to validate fixes and drive remediation.
• Review security configurations and policies to strengthen posture.
• Support cybersecurity investigations and risk assessments as required.
• Stay current with emerging threats and testing tools.

Skills

Penetration testing

Ethical hacking

Scripting & automation

Threat analysis

Reverse engineering

Attacker mindset

Education

Bachelor's degree in computer science or information security

Job description

Metrobank is seeking an Offensive Security Engineer Lead to perform penetration testing, ethical hacking, and red team exercises across networks, web and mobile apps, and other critical systems.

You will collaborate with IT and development teams to validate remediation measures, strengthen security controls, and advance the bank's overall cybersecurity posture through proactive assessments and continuous improvement initiatives.