Security Engineer – Penetration Testing (Red Team)

About the role

Coins, the leading crypto brand in the Philippines, is looking for a seasoned Security Engineer to strengthen its offensive security capabilities. You will lead penetration testing efforts, simulate real‑world attacks, and help build robust detection and response mechanisms.

Key responsibilities

• Conduct comprehensive penetration tests on applications, systems, and cloud environments.
• Organise and execute regular attack‑defense drills with the blue team.
• Research and evaluate emerging offensive and defensive technologies.
• Develop detection rules, monitoring strategies, and intrusion‑traceability processes.
• Design and practice TTPs based on threat intelligence and APT models.

Required profile

• Minimum 5 years of hands‑on experience in offensive security and red‑team operations.
• Proven track record of internal network and domain penetration engagements.
• Experience with AWS, container, and Kubernetes security assessments.
• Strong understanding of Linux/Windows internals, databases, and privilege‑escalation techniques.
• Ability to audit code and discover vulnerabilities in Java, Go, or Python applications.

Required skills

• AWS cloud security
• Kubernetes and container security (Docker)
• Linux and Windows operating systems
• Java, Go, Python programming languages
• Red‑team and blue‑team exercise experience
• Scripting for automated exploitation (e.g., Bash, PowerShell)
• Privilege‑escalation and post‑exploitation techniques

What we offer

• Opportunity to work on high‑impact security projects in a fast‑growing fintech environment.
• Cross‑functional collaboration with product, engineering, and compliance teams.
• Support for innovative ideas backed by data.
• Potential career growth as the company expands beyond APAC.