Offensive Security Engineer: Penetration & Red Team

Metrobank; Philippines; On-site; PHP 900,000 - 1,300,000; Full time

Job summary

Metrobank seeks an Offensive Security Engineer to lead penetration testing, red team activities, and security assessments across networks, web and mobile apps, and critical systems. You will collaborate with IT and development teams to identify vulnerabilities, validate remediation, and strengthen cybersecurity controls.

The role requires hands-on testing experience, knowledge of OWASP Top 10, and relevant certifications.

Qualifications

• Bachelor's degree in CS/InfoSec/Cybersecurity or related field.
• Knowledge of OWASP Top 10 and security testing best practices.
• Hands-on experience in penetration testing and ethical hacking.
• Certifications such as OSCP/GPEN/GWAP/CEH are advantageous.
• Ability to plan, execute, and document security assessments.

Responsibilities

• Plan, develop, and execute penetration testing engagements and red team exercises across networks and applications.
• Conduct threat analysis and simulate real-world attack scenarios.
• Identify vulnerabilities and attack paths using manual and automated methods.
• Assess effectiveness of security controls such as firewalls and IDS/IPS.
• Develop testing methodologies, abuse cases, and custom scripts to enhance testing.
• Document findings and communicate remediation recommendations to stakeholders.
• Partner with IT and development teams to validate fixes and drive remediation.
• Review security configurations and procedures to strengthen security posture.
• Support cybersecurity investigations and risk assessments as needed.
• Stay current with emerging threats and tools; contribute to security governance.

Skills

Penetration testing

Ethical hacking

Threat analysis

Attack techniques

Security testing

Documentation

Communication skills

Analytical mindset

Team collaboration

Remediation guidance

Education

Bachelor's degree in computer science, Information Security, Cybersecurity, or related field

Tools

OSCP

GPEN

GWAP

CEH

Job description

Metrobank seeks an Offensive Security Engineer to lead penetration testing, red team activities, and security assessments across networks, web and mobile apps, and critical systems. You will collaborate with IT and development teams to identify vulnerabilities, validate remediation, and strengthen cybersecurity controls.

The role requires hands-on testing experience, knowledge of OWASP Top 10, and relevant certifications.