Sales Engineer - Philippines

black.ai; Philippines; On-site; PHP 3,683,241 - 5,524,861; Full time

Job summary

black.ai is looking for an experienced Solutions Engineer in the Philippines to act as a technical authority in proactive cybersecurity services. The role is client-facing and involves designing security assessments, conducting red team operations, and engaging in incident responses.

The ideal candidate has at least 5 years of experience in cybersecurity, effective communication skills, and a deep technical understanding of security frameworks and AI risks.

Qualifications

• At least 5 years of client-facing experience in cybersecurity.
• Ability to communicate complex concepts effectively.
• Strong knowledge in network security and cloud architecture.
• Hands-on familiarity with security frameworks.
• Background in offensive security and red teaming.

Responsibilities

• Scope and design security assessment programs.
• Lead red teaming operations and reporting.
• Engage in incident response coordination.
• Demonstrate AI SOC capabilities to clients.
• Partner with sales for technical discovery.

Skills

Client-facing cybersecurity experience

Communication of security concepts

Technical grounding in security

Offensive Security Background

Understanding of AI/ML security risks

Experience in penetration testing

Education

5+ years of experience in cybersecurity roles

Tools

MITRE ATT&CK

OWASP

NIST CSF

ISO 27001

Job description

About The Role

We are seeking an experienced Solutions Engineer based in Philippines to serve as the technical authority for our portfolio of proactive cybersecurity services. This is a client-facing, high-impact role embedded within a fast-moving delivery team that executes red team engagements, continuous attack surface testing, AI‑augmented SOC operations, forensic investigations, and deep‑dive security assessments.

The ideal candidate blends offensive security knowledge with strong consulting instincts — equally comfortable scoping a red team campaign, presenting DFIR findings to a CISO, or articulating the business value of AI‑driven threat detection to a prospective client.

What You’ll Do At Cyble

Assessment Services & Continuous VAPT

• Design and scope comprehensive security assessment programs, including network, web application, API, cloud, and OT/SCADA assessments.
• Drive Continuous VAPT engagements, establishing recurring testing cadences and automated validation pipelines for enterprise clients.
• Produce detailed Assessment Reports with exploitability ratings, remediation roadmaps, and executive‑level risk summaries.

Red Teaming & Adversarial Simulation

• Scope and support full‑spectrum red team operations, including physical, social engineering, and advanced persistent threat (APT) simulation exercises.
• Collaborate with delivery teams to define objectives, rules of engagement, and debrief methodologies aligned to TIBER‑EU, CBEST, and DORA frameworks.
• Present red team findings to technical and executive stakeholders, translating attack chains into prioritized defensive recommendations.

DFIR — Digital Forensics & Incident Response

• Engage clients pre‑ and post‑breach to scope DFIR retainer services, tabletop exercises, and crisis simulation scenarios.
• Support active incident response engagements by coordinating between client teams and Cyble’s forensic analysts, ensuring rapid containment and evidence integrity.
• Develop DFIR readiness assessments covering IR plan reviews, playbook evaluations, and detection‑gap analyses.

AI SOC & Managed Detection

• Demonstrate Cyble’s AI‑powered SOC capabilities, including autonomous threat triage, ML‑driven anomaly detection, and AI‑assisted playbook execution.
• Architect integration blueprints connecting the AI SOC platform with client SIEMs, EDRs, firewalls, and ticketing systems.
• Conduct technical discovery to define SOC maturity baselines and quantify detection coverage gaps before deployment.

AI Security Advisory

• Lead AI security assessments covering LLM prompt injection, model inversion, adversarial inputs, supply chain attacks, and AI governance posture.
• Advise clients deploying AI/ML systems on secure‑by‑design principles, OWASP LLM Top 10 mitigations, and regulatory alignment (EU AI Act, NIST AI RMF).
• Develop and deliver AI security awareness sessions and tabletop exercises tailored to data science, DevSecOps, and executive audiences.

Client Engagement & Sales Support

• Partner with the sales team globally to lead technical discovery calls, respond to RFPs/RFIs, and develop winning service proposals.
• Conduct compelling Proof of Concepts (POCs) and live demonstrations of Cyble’s services platform, threat intelligence feeds, and AI‑driven tooling.
• Act as a trusted technical advisor throughout the pre‑sales and onboarding lifecycle, ensuring smooth handoff to delivery teams.

What You’ll Need

• Experience: 5+ years of client‑facing cybersecurity roles spanning at least two of the following: penetration testing, red teaming, DFIR, SOC operations, or security consulting.
• Communication: Demonstrated ability to communicate complex offensive and defensive security concepts to both technical practitioners and C‑suite stakeholders.
• Technical Depth: Strong technical grounding in network security, application security, cloud architecture, Active Directory, and endpoint detection and response.
• Frameworks & Compliance: Hands‑on familiarity with industry frameworks: MITRE ATT&CK, OWASP, NIST CSF, ISO 27001.
• Offensive Security Background: Experience scoping and supporting security assessments, red team exercises, or VAPT programs in enterprise environments.
• AI Security Awareness: Understanding of AI/ML security risks, adversarial machine learning, and emerging threat vectors targeting AI‑enabled systems.
• Pre‑Sales Acumen: Proven track record of supporting technical sales cycles, building proposals, and engaging procurement and security leadership.

Preferred Qualifications

• Relevant certifications: OSCP, CREST CRT, GREM, GCFE, GCIH, CISSP, CEH, or equivalent offensive/defensive credentials.