Red Team Penetration Engineer

Metrobank; Philippines; On-site; PHP 600,000 - 1,000,000; Full time

Job summary

Metrobank is seeking a security professional to plan, document test methodologies and perform penetration testing of network and application systems including mobile apps, to identify weaknesses in the system.

You will collaborate with ITG developers, establish red team procedures, conduct threat analyses, run scans, and document findings with remediation recommendations for both technical and executive audiences.

Qualifications

• Graduate of any college degree in Computer Science or Information Security, Cybersecurity or related technical field.
• Strong understanding of vulnerabilities, common attack vectors and attacker mindset.
• Full knowledge and understanding of OWASP Top 10 Application Security best practices.
• Certification may include SANS GPEN, GWAP, OSCP, CEH or equivalent.
• Technical knowledge and experience in ethical hacking.
• Advanced computer skills – networking fundamentals, forensics, reverse engineering, web apps, databases, and wireless tech.
• Scripting and programming – scripting skills to infiltrate any system.
• Excellent analytical and communication skills; team-oriented and proactive.
• Time management and self-motivation in a fast-paced environment.

Responsibilities

• Perform threat analysis, wireless network assessments, and social-engineering assessments including physical security assessments.
• Conduct network and system security scans, perform manual and automated hacking techniques on network, web and mobile apps.
• Evade IDS/IPS, firewalls, and honeypots to ensure effectiveness and reinforcement when needed.
• Identify methods and entry points attackers may use to exploit vulnerabilities.
• Develop testing methods and tools to identify vulnerabilities in business logic.
• Research, document and discuss findings with IT teams and management; remediate vulnerabilities.
• Communicate findings and remediation strategy to stakeholders; prepare reports for technical and executive audiences.
• Review, verify and provide feedback on information security fixes.
• Establish improvements for existing security services, including policies and procedures.
• Observe business continuity during testing to minimize downtime.
• Stay updated on latest malware and security threats.
• Assist in cyber security investigations.
• Recognize safe use of attacker tools, tactics, and procedures.
• Keep abreast with attack vectors and penetration testing tools.
• Analyze security policies and configurations for effectiveness against an attack.
• Collaborate with the Department Head to improve information security plans and strategies.
• Perform other information security governance, risk and compliance duties as directed.

Skills

Vulnerability analysis

OWASP Top 10

Ethical hacking

Networking fundamentals

Scripting

Problem solving

Education

Bachelor's degree in Computer Science

Information Security

Cybersecurity

Tools

Nmap

Burp Suite

Metasploit

Wireshark

Kali Linux

Job description

Metrobank is seeking a security professional to plan, document test methodologies and perform penetration testing of network and application systems including mobile apps, to identify weaknesses in the system.

You will collaborate with ITG developers, establish red team procedures, conduct threat analyses, run scans, and document findings with remediation recommendations for both technical and executive audiences.