Security Engineer (Penetration Testing – Red Team)

About the role

Coins, the leading crypto brand in the Philippines, is looking for a seasoned Security Engineer to strengthen its offensive security capabilities. You will lead penetration testing efforts, design attack‑defense drills, and help build robust detection and response mechanisms for our mobile and web platforms.

Key responsibilities

• Conduct comprehensive penetration tests on applications, cloud infrastructure, containers, and Kubernetes environments.
• Organise regular red‑team/blue‑team exercises and simulate real‑world attack scenarios.
• Research emerging offensive and defensive techniques, evaluate new security tools, and integrate them into the security stack.
• Develop detection rules, monitoring strategies, and intrusion‑traceability processes.
• Document threat‑intel‑driven TTPs and create counter‑measure playbooks.

Required profile

• Minimum 5 years of hands‑on experience in offensive security and penetration testing.
• Proven track record of internal network, domain, and cloud (AWS) penetration engagements.
• Experience with container and Kubernetes security assessments.
• Strong understanding of Linux/Windows systems, databases, and privilege‑escalation techniques.
• Ability to work independently and produce high‑quality security reports.

Required skills

• Penetration testing and red‑team operations
• AWS cloud security
• Kubernetes and container security
• Linux and Windows system exploitation
• Database (SQL) security testing
• Code auditing in Java, Go, and Python
• Scripting for automated exploitation and tool development
• Blue‑team collaboration and detection rule creation

What we offer

• Opportunity to shape security strategy for a fast‑growing crypto platform.
• Cross‑functional collaboration with product, engineering, and compliance teams.
• Supportive culture that values data‑driven ideas and innovation.