Senior AI-Driven Offensive Security Engineer

Recruitday Inc.; Taguig; Presencial; PHP 1.200.000 - 1.800.000; Jornada completa

Descripción de la vacante

Recruitday Inc. is seeking a Senior Offensive Security Engineer in the Philippines to perform deep manual testing of web applications and APIs, amplified by approved offensive AI technologies.

The role emphasizes independent validation of AI-generated hypotheses and reproducible exploits to demonstrate significant findings. You will conduct threat modeling, test across multiple identities and workflows, and produce high-quality remediation-focused reports in a fast-paced, security-first

Formación

• 5+ years of hands-on application security or penetration-testing experience.
• Demonstrated ability to discover business-logic and authorization vulnerabilities through manual analysis.
• Advanced hands-on experience with Burp Suite Pro and related offensive-security tooling.
• Strong knowledge of the OWASP WSTG, OWASP Top 10, and OWASP API Security Top 10.

Responsabilidades

• Perform full-scope penetration testing of customer-facing and internal web applications, APIs, and supporting services.
• Conduct threat modeling and analyze architecture, trust boundaries, authentication, authorization, data flows, and business workflows.
• Perform deep manual security testing beyond automated scanners.
• Identify and exploit complex vulnerabilities and demonstrate reproducible, exploitable findings.
• Test with multiple identities, roles, and workflow states to expose weaknesses.
• Develop reproducible proofs-of-concept and clearly communicate impact.

Conocimientos

Application security

Penetration testing

Manual testing

Security writing & communication

AI-assisted security

Herramientas

Burp Suite Professional

Python scripting

Descripción del empleo

Recruitday Inc. is seeking a Senior Offensive Security Engineer in the Philippines to perform deep manual testing of web applications and APIs, amplified by approved offensive AI technologies.

The role emphasizes independent validation of AI-generated hypotheses and reproducible exploits to demonstrate significant findings. You will conduct threat modeling, test across multiple identities and workflows, and produce high-quality remediation-focused reports in a fast-paced, security-first