Offensive Security/Red Team Lead

Bangko Sentral Ng Pilipinas; Philippines; Hybrid; PHP 1,200,000 - 1,800,000; Full time

Job summary

Bangko Sentral ng Pilipinas seeks a senior cybersecurity professional to lead red team operations, adversary emulation, and engagement leadership within critical infrastructure environments.

Qualifications include a Bachelor's (and Master’s preferred) in CS/IT/Engineering, 9+ years of experience, and relevant certifications. The role emphasizes security testing, reporting, and regulatory compliance for resilient cyber defense.

Qualifications

• Bachelor's degree in CS/IT/Engineering or ECE.
• Master's degree in Cybersecurity/Information Systems advantageous.
• Eligibility: Career Service Professional / Second Level Eligibility.

Responsibilities

• Lead red team engagements from scoping to remediation guidance.
• Conduct adversary emulation and purple team exercises with detection and IR teams.
• Oversee testing engagements in financial/critical infrastructure environments ensuring regulatory compliance.

Skills

Red Team

Threat Emulation

Engagement Leadership

Education

Bachelor's degree in Computer Science, Information Technology, Computer Engineering, or Electronics and Communications Engineering (ECE)

Master's degree in Cybersecurity, Information Systems, or related field (advantage)

Job description

Select how often (in days) to receive an alert:

Leads the Red Team Unit, adversary simulation, and vulnerability management to identify security weaknesses and continuously improve BSP’s cyber defense capabilities

Qualifications

Education: Bachelor's degree in Computer Science, Information Technology, Computer Engineering, or Electronics and Communications Engineering (ECE);Master's degree in Cybersecurity, Information Systems, or any related field is an advantage

Experience: At least 9 years of relevant experience

Training: At least 80 hours of relevant training/learning and development intervention taken within the last 5 years in any of the areas mentioned under areas of experience, and 8 hours of cybersecurity-related training for the last 2 years

Eligibility: Career Service Professional / Second Level Eligibility

Areas of Experience:

• Red team & penetration testing: leads end-to-end threat-informed testing, from scoping and execution to reporting and remediation guidance
• Adversary emulation & purple teaming: conducts intelligence-led attack simulations and collaborates with detection and incident response teams to validate controls, exposure, and business impact
• Engagement leadership: leads testing engagements in financial/critical infrastructure environments, ensuring team quality, authorization, safety, and regulatory compliance

Certifications

Must hold at least one of the following:

• Offensive Security Certified Professional
• Offensive Security Certified Professional Plus
• Offensive Security Experienced Penetration Tester
• Certified Red Team Operator
• GIAC Red Team Professional

Any of the following certifications is an advantage:

• CREST Certified Red Team Specialist
• Certified AWS Security Professional
• GIAC Exploit Researcher and Advanced Penetration