Lead Penetration Testing Engineer

Hammerjack Pty Ltd; Taguig; On-site; PHP 900,000 - 1,500,000; Full time

Job summary

Metrobank is seeking an Offensive Security Engineer to lead penetration testing, red team exercises, and security assessments across networks, web and mobile apps, and critical systems. You will collaborate with IT and development teams to validate remediation measures and strengthen security controls.

You will stay ahead of emerging threats, document findings, and communicate risk mitigations to stakeholders, helping the bank maintain a robust cybersecurity posture with minimal business

Qualifications

• Bachelor's degree in computer science, information security, or related field.
• Hands-on experience in penetration testing and ethical hacking.
• Strong knowledge of OWASP Top 10 risks and best practices.
• Certifications such as OSCP, GPEN, GWAP, CEH are advantageous.
• Ability to identify threats and assess potential risks.

Responsibilities

• Plan, develop, and execute penetration testing engagements.
• Conduct threat analysis and simulate real-world attack scenarios.
• Identify vulnerabilities and attack paths using manual and automated tests.
• Assess security controls like firewalls and IDS/IPS.
• Develop testing methodologies and custom security tools.
• Document findings and present remediation recommendations.
• Collaborate with IT and development to validate fixes.
• Review configurations, policies, and procedures for improvements.
• Support investigations and risk assessments as needed.
• Stay current with emerging cyber threats and tools.
• Contribute to security governance and program improvements.

Skills

Penetration testing

Ethical hacking

Network security

Scripting & automation

Threat analysis

Communication skills

Team collaboration

Education

Bachelor's degree in CS/InfoSec

Tools

OSCP

GPEN

CEH

Job description

Metrobank is seeking an Offensive Security Engineer to lead penetration testing, red team exercises, and security assessments across networks, web and mobile apps, and critical systems. You will collaborate with IT and development teams to validate remediation measures and strengthen security controls.

You will stay ahead of emerging threats, document findings, and communicate risk mitigations to stakeholders, helping the bank maintain a robust cybersecurity posture with minimal business