{"id":116220,"url":"https://alion.io/job/gcash-offensive-security-engineer","title":"Offensive Security Engineer","company":{"id":8370,"name":"GCash","domain":"gcash.com","url":"https://alion.io/company/gcash","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":70,"open_postings":110,"ghost_share":0.409,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":60,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Taguig, Philippines"],"countries":["PH"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":21000,"max_usd":55000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":623},"experience_years_min":1,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"MITRE ATT&CK","optional":false},{"name":"Red Teaming","optional":false}],"status":"live","first_seen_at":"2026-04-06T00:00:00Z","employer_posted_date":"2026-04-06","last_verified_at":"2026-10-15T17:16:20Z","board_verified":true,"closed_at":null,"days_open":194,"trust":{"level":"ghost","repost_count":0,"flags":["stale","company_stale"],"days_open":194},"description":"Do you want to take the first step in making Filipinos’ lives better everyday? Here in GCash we want to stay at the forefront of the FinTech industry by creating innovative, meaningful, and convenient financial solutions for the nation! G ka ba? Join the G Nation today!\nAbout the job\nDo you want to help protect and shape the digital future of millions of Filipinos? At GCash, we operate at a massive scale in one of the most targeted industries in the world - financial services. To stay ahead, we don’t just react to threats; we actively simulate them.\nWe are looking for a Lead, Offensive Security Engineer to lead and execute advanced red team and offensive security operations. This role is for someone who thinks like an attacker, operates with discipline, and can translate technical findings into meaningful security improvements across the organization.\nIf you enjoy breaking things responsibly and influencing security strategy, not just running tools, this role is for you.\nKey Responsibilities\nLead and execute red team and advanced penetration testing engagements that simulate real-world threat actors across applications, infrastructure, cloud, and identity environments\n\nIdentify, exploit, and chain vulnerabilities to demonstrate realistic attack paths and business impact\n\nDesign and improve adversary simulation scenarios aligned with real-world threat intelligence and the MITRE ATT&CK framework\n\nPartner closely with blue team, security engineering, and security operations teams to improve detection, response, and overall security posture\n\nDevelop tooling, automation, or research to identify security weaknesses at scale and improve testing efficiency\n\nProduce high-quality technical and executive-level reports, clearly communicating risk, impact, and remediation guidance\n\nStay ahead of emerging threats, techniques, and tooling, continuously evolving red team tradecraft\n\nPreferred Qualifications\n1-3 years of hands-on experience in red teaming, offensive security, advanced penetration testing\n\nProven track record of discovering impactful vulnerabilities, including complex or chained attack paths\n\nStrong understanding of attacker tradecraft, including web, cloud, identity, and infrastructure attack vectors\n\nPractical experience with adversary simulation and the MITRE ATT&CK framework\n\nAbility to lead, mentor, and influence (this is a hands-on leadership role, not just an individual contributor position)\n\nStrong written and verbal communication skills, with the ability to explain technical risk to both engineers and executives\n\nAt least one practical security certification, such as:\nOSCP, OSEP, OSWE, OSED, OSWP, CRTO, CRTL, CRTP, CRTE, GRTP, CPTS, CWEE, CAPE\n\nCandidates are encouraged to include write-ups, research, bug bounty findings, or internal/external reports demonstrating offensive security work.\n\nWhat We Offer\nThe opportunity to help build and lead offensive security capabilities in the country’s #1 FinTech platform\n\nWork alongside a highly skilled, collaborative, and mission-driven security team\n\nReal impact - your work directly protects millions of users and high-value financial systems\n\nA culture that values technical excellence, ownership, and continuous improvement\n\nWhat We Offer\nOpportunity for career growth and development in the #1 FinTech company in the country Working with a dynamic and highly collaborative team who want to change the game A company that values their people with highly competitive and flexible compensation and benefits package","description_format":"text","description_chars":3518,"description_truncated":false,"requirements":{"experience_years_min":1,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Payment Processing & Gateways","Digital Banks & Neobanks"],"lifecycle":[{"event":"open","at":"2026-04-06T00:00:00Z"}],"visa":[],"liveness":{"score":8,"band":"cold","label":"Long shot","p_open":1,"p_active":0.3,"p_room":0.28,"age_days":194,"expected_fill_days":60,"reasons":["conf:36","velocity","ghost","win:tail","crowd:brand"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/gcash-offensive-security-engineer","json_url":"https://alion.io/job/gcash-offensive-security-engineer.json","meta":{"generated_at":"2026-10-17T06:24:52Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8662,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":8370},"rest":"https://alion.io/mcp/rest/get_company?id=8370"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgcash-offensive-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgcash-offensive-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgcash-offensive-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/gcash-offensive-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgcash-offensive-security-engineer"}]}