Offensive Security Engineer: Penetration Testing Lead

Thrive; Capas; Hybrid; PHP 450,000 - 750,000; Full time

Job summary

Thrive, a rapidly growing technology solutions provider in the Philippines, is seeking a Security Engineer to join the Offensive Security team. You will own vulnerability management, perform penetration tests, write professional reports, and deliver insights to clients.

You will collaborate with internal teams, stay updated on industry best practices, and help remediation efforts. Strong analytical skills and ability to communicate complex security concepts to non-technical stakeholders are

Qualifications

• Solid understanding of networks, operating systems, and security best practices.
• Familiarity with cybersecurity threats, incident response standards and procedures.
• Ability to translate security findings to non-technical stakeholders.
• Demonstrated passion for cybersecurity and good security practices.
• Knowledge of vulnerability management and pentesting methodologies.

Responsibilities

• Execute and analyze vulnerability scans and determine remediation steps.
• Perform Penetration Tests (manual and automated), write reports and deliver to clients.
• Lead client meetings with expert guidance and remediation recommendations.
• Collaborate with clients to align remediation with business outcomes.
• Maintain security process documentation and generate automated stakeholder reports.
• Stay updated on security events and emerging attack techniques.

Skills

Penetration testing

Vulnerability assessment

Security analysis

Network security

Incident response

Threat detection

Security reporting

Communication skills

Python

Tools

Burp Suite

Metasploit Framework

Caido

Job description

Thrive, a rapidly growing technology solutions provider in the Philippines, is seeking a Security Engineer to join the Offensive Security team. You will own vulnerability management, perform penetration tests, write professional reports, and deliver insights to clients.

You will collaborate with internal teams, stay updated on industry best practices, and help remediation efforts. Strong analytical skills and ability to communicate complex security concepts to non-technical stakeholders are