Lead Penetration Tester & Red Team Engineer

Metrobank; Taguig; On-site; PHP 1,200,000 - 2,400,000; Full time

Job summary

Metrobank is seeking an Offensive Security Engineer Lead to plan, develop, and execute penetration testing engagements across networks, web and mobile apps, and critical systems. You will collaborate with IT and development teams to validate fixes and strengthen defenses, driving proactive security improvements.

The role requires hands-on experience in penetration testing, strong knowledge of OWASP Top 10, and security certifications.

Qualifications

• Bachelor's degree in computer science, Information Security, Cybersecurity, or a related technical field.
• Hands-on experience in penetration testing and ethical hacking.
• Strong understanding of security vulnerabilities, common attack techniques, and an attacker mindset to identify and assess potential threats.
• Solid knowledge of OWASP Top 10 Application Security risks and best practices.
• Relevant cybersecurity certifications such as OSCP, GPEN, GWAP, CEH, or equivalent are an advantage.

Responsibilities

• Plan, develop, and execute penetration testing engagements, red team exercises, and security assessments across networks, systems, web applications, mobile applications, and wireless environments.
• Conduct threat analysis and simulate real-world attack scenarios, including social engineering and physical security assessments.
• Identify vulnerabilities, attack paths, and security weaknesses using both manual and automated testing techniques.
• Assess the effectiveness of security controls such as firewalls, intrusion detection/prevention systems, and other defensive technologies.
• Develop testing methodologies, abuse cases, and custom scripts or tools to enhance security testing capabilities.
• Document findings, prepare comprehensive technical and executive reports, and communicate remediation recommendations to stakeholders.
• Partner with IT and development teams to validate security fixes and drive timely remediation of identified vulnerabilities.
• Review security configurations, policies, and procedures, providing recommendations to strengthen the organization's security posture.
• Support cybersecurity investigations and security-related risk assessments as required.
• Stay current with emerging cyber threats, attack techniques, vulnerability trends, and penetration testing tools.
• Contribute to the continuous improvement of the bank's information security strategies, programs, and governance initiatives while ensuring minimal disruption to business operations.

Skills

Penetration testing

Ethical hacking

Network security

Threat analysis

Scripting

Education

Bachelor's degree in Computer Science / Information Security / Cybersecurity

Tools

Metasploit

Burp Suite

Nmap

Wireshark

Job description

Metrobank is seeking an Offensive Security Engineer Lead to plan, develop, and execute penetration testing engagements across networks, web and mobile apps, and critical systems. You will collaborate with IT and development teams to validate fixes and strengthen defenses, driving proactive security improvements.

The role requires hands-on experience in penetration testing, strong knowledge of OWASP Top 10, and security certifications.