Security Engineer (Penetration Testing - Red Team)
Digital wallet and cryptocurrency exchange platform enabling Filipinos to buy, sell and manage crypto assets with integrated payment services.
About Coins.ph
Coins.ph serves as a regulated crypto platform for over 18 million Filipino users, offering cryptocurrency trading, bill payments, and remittance services. The platform integrates QR payments and mobile load purchases with crypto services, making digital assets accessible to Filipinos.
Skills
About the Role
You will conduct comprehensive penetration testing on company applications and systems and organize regular attack-defense drills. You will test and bypass the defenses of the blue team to enhance overall security protection. You'll research offensive and defensive technologies, track industry trends, and introduce effective security tools. You will help build security capabilities such as detection rules, monitoring strategies, and intrusion traceability, and you'll design and drill countermeasures and TTPs based on real threat intelligence and industry APT behavior models.
Requirements
- Possess more than 5 years of practical experience in attack and defense, and be able to independently complete penetration testing work
- Familiar with common internal network attack ideas and methods, have internal network penetration and domain penetration capabilities with successful cases
- Have practical experience in AWS cloud environment penetration, container and Kubernetes security attack and defense
- Familiar with Linux/Windows system principles, databases and related technologies, and proficient in command execution and privilege escalation techniques
- Familiar with mainstream Web frameworks and capable of code auditing and vulnerability mining (java/go/python)
- Have practical experience in red and blue team exercises
- Be able to write scripts or tools for automated exploitation and basic tool development
Responsibilities
- Conduct comprehensive penetration testing on company applications and systems
- Organize regular attack-defense drills
- Test and bypass the defense technologies of the company's blue team to enhance the security protection level
- Research offensive and defensive technologies and track and analyze cutting-edge industry technologies
- Introduce excellent security technologies and tools
- Participate in the construction of security capabilities, including detection rules, monitoring strategies, and intrusion traceability
- Build and drill countermeasures and TTPs based on real threat intelligence and industry APT behavior models
