Senior Red Team Lead – Cloud & Offense

sunlife; Philippines; On-site; PHP 1,800,000 - 3,000,000; Full time

Job summary

The Sun Life information security team is seeking an experienced senior red team operator to simulate cyberattacks, assess vulnerabilities and strengthen defenses. You will design attack scenarios, develop tooling, and mentor junior staff while coordinating with cross‑functional teams to improve detection and response capabilities.

Applicants should have 5–7 years in offensive security, a university degree in a related field, and strong programming and scripting skills.

Qualifications

• 5–7 years' experience in offensive security / penetration testing.
• University degree in computer science, computer engineering or computer security.
• Strong, demonstrable experience in offensive security programming and automation languages: C, C++, ASM, C#, JavaScript, PowerShell, Rust, Nim etc.
• Minimum 2 years mentoring junior and mid-level operators on red team tradecraft.
• Minimum 4 years of experience in delivering technical red team reports and briefings.
• A general understanding of information security concepts and security trends and practices.
• Problem solving with creative solutions.
• Maintain high technical knowledge of systems and solutions.
• Industry certifications (OSCP/SANS/CEH/CISSP, CPTS) are a strong asset.
• Understand operation systems (OS), network protocols, application configuration with excellent report-writing skills.
• Strong communication and presentation skills

Responsibilities

• Plan, carry out, and report on Red Team assessments, attack simulations and adversary emulation exercises to identify vulnerabilities in critical information systems.
• Perform network penetration, web and mobile application testing, source code reviews, threat analysis, and social engineering assessments.
• Develop scripts, tools, and programs for Red Team operations.
• Manage, maintain, and improve an OPSEC-focused state-of-the-art command-and-control (C2) red team cloud environment (AWS, Azure, GCP ,Digital Ocean)
• Assist with and develop security control evasion and bypass capabilities.
• Work with other parts of the business to develop a method for testing detection capabilities through Purple Team Exercises and Red Team exercises (e.g., IA scenarios, AB scenarios etc.)
• Research latest threats and adhere to guidelines on Red Team Frameworks
• Assist in the production of weekly/ monthly reports on security vulnerability trending and direction.

Skills

Red Team

Penetration Testing

Programming

Education

University degree in computer science/engineering/security

Tools

Cobalt Strike

EDR Evasion

Social Engineering platforms

Malware techniques

Custom tooling

Pipeline development

Job description

The Sun Life information security team is seeking an experienced senior red team operator to simulate cyberattacks, assess vulnerabilities and strengthen defenses. You will design attack scenarios, develop tooling, and mentor junior staff while coordinating with cross‑functional teams to improve detection and response capabilities.

Applicants should have 5–7 years in offensive security, a university degree in a related field, and strong programming and scripting skills.