Job Description

Join KinoSec and help our continuous learning technology get sharper with every target it meets.

About KinoSec

KinoSec is an autonomous offensive security platform built by hackers. We cover both the external and internal attack surface through two products: Zeus for web apps (including AI-generated and vibe-coded apps), APIs, and cloud, and Poseidon for external and internal network pentesting, including Active Directory and OT/ICS. KinoSec scored 99.04% effectiveness against human pentesters on black-box testing. Our team took 1st place at the DEF CON 34 Hack The Box CTF, and KinoSec was named Most Innovative Company of the Year at the Asia CEO Awards 2026.

Our mission: stop the upcoming cyber doomsday by creating the most realistic Skynet-level AI hacker that empowers organizations to hack themselves before the bad guys do.

About the role

You'll report to our Chief Hacking Officer and work on the heart of KinoSec: our continuous learning technology, the part of the platform that keeps getting better at hacking over time. Your skills, research, and findings help it learn faster and hit harder. Experience is not required. We want someone passionate about hacking who enjoys a fast-moving startup and is excited to learn on the job.

What you'll do

• Work hands-on with KinoSec's continuous learning technology to make the platform sharper with every engagement

• Bring your hacking skills and research into the platform so what you know, KinoSec learns

• Challenge the platform with new targets and techniques, find where it falls short, and help close the gaps

• Keep KinoSec current as new vulnerabilities, CVEs, and attack techniques emerge

• Support authorized pentests across Zeus (web apps, APIs, cloud) and Poseidon (external and internal networks, Active Directory, OT/ICS)

• Validate and reproduce vulnerabilities before they reach customers

• Write clear findings with proof of concept, impact, and remediation

• Build small tools in Python, Bash, or Go to automate your work

What we're looking for

• Must be currently living in the Philippines and able to work full-time from our office

• Able to work a US time shift: 7:00 PM to 4:00 AM Philippine time

• No prior experience required. Passion for hacking matters more than your resume

• Comfortable in a fast-moving startup where priorities can shift quickly (we'll support you as you ramp up)

• A hunger to keep learning, because the platform you work on never stops

• Familiarity with Active Directory and common AD attacks such as enumeration, Kerberoasting, AS-REP roasting, NTLM relay, ACL abuse, delegation abuse, and lateral movement (from labs, CTFs, or self-study is fine)

• Basic familiarity with web application vulnerabilities (OWASP Top 10, common API flaws) and tools such as Burp Suite, or willingness to learn

• Basic knowledge of networking, Linux, and Windows

• Exposure to, or willingness to learn, tools such as BloodHound, Impacket, NetExec, Responder, Rubeus, and Mimikatz

• Basic scripting in Python or PowerShell, or eager to learn

• Clear written English for findings and reports

• Strong ethics and a clear understanding of authorized testing

Nice to have

• CRTO, CRTP, CPTS, OSCP, PNPT, or eJPT (or working toward one)

• Active Hack The Box (including Pro Labs) or TryHackMe profile, or CTF rankings

• Bug bounty findings or CVEs credited to you

• Experience with internal networks or OT/ICS environments

• Familiarity with LLMs, AI agents, or AI red teaming

• A blog, GitHub, or write-ups that show how you think

Benefits

• All Philippine statutory benefits: SSS, PhilHealth, Pag-IBIG, 13th month pay, holiday pay, night differential pay, service incentive leave, and statutory leaves

• Mentorship from award-winning hackers

• Certification and training support

• Hands-on work on a live AI pentesting platform used by paying customers

• Eligibility for periodic trips to our US office to work alongside the US team

How to apply

Apply with your resume plus links that show your hacking: Hack The Box, TryHackMe, or other lab profile, CTF results, GitHub, blog, or bug bounty profile. Links matter more than a polished CV.

Hiring process: application review, intro call, hands-on technical challenge, technical interview with our Chief Hacking Officer, final interview with our CEO, offer.