Offensive Security Engineer | Penetration Testing Lead

Thrive; Quezon City; On-site; PHP 600,000 - 1,000,000; Full time

Job summary

Thrive is seeking a Security Engineer in Metro Manila to join its Offensive Security team. The role focuses on vulnerability management and Penetration Testing as a service, delivering strategic security insights to clients through findings and remediation steps.

You will own service delivery, work with internal Thrive teams, explain findings to customers, and stay current with industry best practices and tools such as Burp Suite, Metasploit, and Python scripting.

Qualifications

• 3–5 years of experience performing penetration tests and reporting to clients.
• Knowledge of Windows and Linux OS and security fundamentals.
• Familiarity with TCP/IP, HTTP, DNS, and related protocols.

Responsibilities

• Execute and analyze vulnerability scans; determine remediation steps.
• Perform manual and autonomous penetration tests; write and deliver client reports.
• Lead client meetings; provide expert guidance on security findings.
• Collaborate with clients to align remediation with business needs.
• Create and maintain security process materials; generate automated stakeholder reports.
• Update client security presentations and discuss findings.
• Stay informed on security events, threats, and techniques.
• Perform other duties as required.

Skills

Penetration testing

Vulnerability assessment

Network security

Incident response

Report writing

Communication skills

TCP/IP

Windows/Linux

Python

Security certifications

Tools

Burp Suite

Metasploit framework

Caido

Job description

Thrive is seeking a Security Engineer in Metro Manila to join its Offensive Security team. The role focuses on vulnerability management and Penetration Testing as a service, delivering strategic security insights to clients through findings and remediation steps.

You will own service delivery, work with internal Thrive teams, explain findings to customers, and stay current with industry best practices and tools such as Burp Suite, Metasploit, and Python scripting.