Offensive Security Engineer

Total Information Management Corporation; Philippines; On-site; PHP 1,200,000 - 2,400,000; Full time

Job summary

Total Information Management Corporation in the Philippines seeks an Offensive Security Engineer to lead red team and purple team engagements, emulating real-world threats to strengthen defenses and drive measurable improvements.

You will combine offensive and blue-team skills, develop custom tooling, and simulate complex attacks across networks, endpoints, and cloud environments. A Bachelor's degree and 3+ years of pentesting are required for this high-impact role.

Qualifications

• Bachelor's degree in Computer Science/Information Technology.
• At least 3 years of Vulnerability and Penetration Testing experience.

Responsibilities

• Plan and execute full-scope red team engagement—from initial reconnaissance/OSINT through persistence, lateral movement, privilege escalation, and objective completion.
• Perform advanced adversary emulation using real-world TTPs mapped to MITRE ATT&CK.
• Conduct purple team exercises—work with blue teams to test detections and tune rules/alerts.
• Develop and maintain custom offensive tooling using Python, Go, PowerShell, and C/C++.
• Perform specialized testing: web/app exploitation, AD domination, cloud, mobile/wireless.

Skills

Networking & Protocols

Operating Systems Internals

Security Concepts

Education

Bachelor's degree in Computer Science/Information Technology

Tools

Python

Go

PowerShell

C/C++

Job description

The Offensive Security Engineer will act as an elite adversary simulator, leading full-scope red team and purple team engagements to test and strengthen organizational defenses. This role combines advanced offensive techniques with deep blue team knowledge to emulate real-world threats, identify detection gaps, and drive measurable security improvements. Bridge offense and defense-making this a high-impact, high-reward position with hybrid red/purple skills.

Duties and Responsibilities

• Plan and execute full-scope red team engagement-from initial reconnaissance/OSINT through persistence, lateral movement, privilege escalation, and objective completion (e.g., data exfil, ransomware simulation).
• Perform advanced adversary emulation using real-world TTPs mapped to MITRE ATT&CK (including living-off-the-land, evasion of EDR/XDR, AMSI/ETW bypass).
• Conduct purple team exercises-work side-by-side with blue teams/SOC to test detections in real-time, provide instant feedback, and help tune rules/alerts based on observed attack paths.
• Develop and maintain custom offensive tooling (Python, Go, PowerShell, C/C++ for implants, C2 frameworks, evasion payloads).
• Perform specialized testing: web/app exploitation, Active Directory domination, cloud attacks (AWS/Azure/GCP), mobile/wireless.

Qualifications

• Bachelor's degree in Computer Science/Information Technology.
• At least 3 years of Vulnerability and Penetration Testing experience.

Knowledge and Skills in

• Networking & Protocols - Deep understanding of TCP/IP, OSI model, subnetting, routing, DNS, HTTP/HTTPS, SMP, LDAP, Kerberos, etc.
• Operating Systems Internals - Linux, Windows, Active Directory architecture, file systems, processes, memory management.
• Security Concepts - MITRE ATT&CK Framework, OWASP Top 10, common vulnerabilities (CVEs), defense evasion techniques, living-off-the-land.