Penetration Tester

1 month ago


Taguig, Philippines Nityo Infotech Full time

LOCATION: Taguig
SCHEDULE: UK Shift 4pm to 1am
WORK SETUP: Remote (will report to office as a needed basis only)

QUALIFICATIONS:
* Education: A bachelor’s degree in a related field such as computer science, information security, or cybersecurity is commonly preferred, but not always mandatory. Relevant industry experience can compensate for formal education requirements.
* Technical Knowledge: A strong understanding of web technologies, programming languages (e.g., HTML, CSS, JavaScript, PHP, Python), and web application architecture is essential. Knowledge of networking fundamentals, operating systems, and databases is also beneficial.
* Minimum 2 years of proven Penetration Testing experience – Senior Penetration Tester or Lead.
* Web Application Security: In-depth knowledge of web application vulnerabilities, common attack techniques, and mitigation strategies.
* Strong understanding of OWASP Top 10 vulnerabilities is crucial.
* Infrastructure security: Working knowledge of different on-prem and cloud builds (IaaS, PaaS, SaaS), in-depth understanding of operating system and its common flaws.
* Penetration Testing Techniques: Proficiency in various penetration testing methodologies, tools, and frameworks. Experience with manual testing techniques, automated vulnerability scanners, and exploit frameworks is necessary.
* Programming and Scripting: Proficiency in at least one programming language (e.g., Python, Ruby, or JavaScript, etc.) to write custom scripts and tools.
* Understanding SQL queries for database testing is also important.
* Analytical and Problem-Solving Skills: Ability to analyze complex web application environments, identify vulnerabilities, and exploit them.
* Strong problem-solving skills to understand attack vectors and recommend appropriate countermeasures.

Holds relevant industry certification/s or equivalent like the following:
* CEH – Certified Ethical Hacker
* OSCP – Offensive Security Certified Professional
* GPEN – GIAC Penetration Tester
* PNPT – Practical Network Penetration Tester
* Burp Suite Certified Practitioner
* eWAPT/eWAPTx – eLearning Web Application Penetration Tester

Responsibilities:

* Vulnerability Assessment: Conducting comprehensive assessments of web applications and Infrastructure to identify security vulnerabilities, such as cross-site scripting (XSS), SQL injection, authentication flaws, insecure configurations, poor host device and service configurations, and use these to penetrate deeper into the application/server.
* Penetration Testing: Performing controlled attacks on web applications. APIs, infrastructure, and simulate real-world hacking attempts and identify potential entry points for attackers. This involves utilizing various techniques, tools, and methodologies to exploit vulnerabilities and gain access.
* Security Analysis: Analyzing the results of penetration tests to assess the severity of identified vulnerabilities, their potential impact on the system and the business, and the likelihood of exploitation.
* Reporting and Documentation: Preparing detailed reports that document the findings, including identified vulnerabilities, attack vectors, and recommendations for remediation. These reports typically outline the risks associated with each vulnerability and provide guidance on how to mitigate them.
* Remediation Support: Collaborating with developers and system administrators to assist in the remediation of identified vulnerabilities. This may involve providing guidance on secure coding practices, recommending security controls, or validating the effectiveness of implemented fixes.
* Stay Up to Date: Keeping abreast of the latest web application and infrastructure vulnerabilities, attack techniques, security tools, and industry best practices. This includes staying informed about emerging threats and trends in web applications and infrastructure.
* Ethical Approach: Conducting all testing and assessment activities within a legal and ethical framework, ensuring that the organization’s systems and data are not compromised or harmed during the process.
* Continuous Improvement: Engaging in professional development activities, such as attending conferences, participating in training programs, and obtaining relevant certifications, to enhance knowledge and skills in cyber security.


  • Penetration Tester

    2 weeks ago


    Taguig, National Capital Region, Philippines Nityo Infotech Full time

    The RequirementsMinimum Criteria:Education: A bachelor's degree in a related field such as computer science, information security, or cybersecurity is commonly preferred, but not always mandatory. Relevant industry experience can compensate for formal education requirements.Technical Knowledge: A strong understanding of web technologies, programming...

  • Penetration Tester

    1 month ago


    Taguig, Philippines Nityo Infotech Services Philippines Inc. Full time

    Location: BGC, Taguig (WFH, will report onsite as needed only) Schedule: UK Shift - 4 pm - 1 am The Role A penetration tester is responsible for assessing the security of web applications and its underlying infrastructure to identify vulnerabilities and weaknesses that could be exploited by attackers. Their role involves conducting thorough assessments and...

  • Penetration Tester

    4 weeks ago


    Taguig, Philippines Nityo Infotech Services Philippines Inc. Full time

    Location: BGC, Taguig (WFH, will report onsite as needed only) Schedule: UK Shift - 4 pm - 1 am The Role A penetration tester is responsible for assessing the security of web applications and its underlying infrastructure to identify vulnerabilities and weaknesses that could be exploited by attackers. Their role involves conducting thorough assessments and...

  • Penetration Tester

    1 month ago


    Taguig, Philippines Nityo Infotech Full time

    LOCATION: Taguig SCHEDULE: UK Shift 4pm to 1am WORK SETUP: Remote (will report to office as a needed basis only) QUALIFICATIONS: * Education: A bachelor’s degree in a related field such as computer science, information security, or cybersecurity is commonly preferred, but not always mandatory. Relevant industry experience can compensate for formal...

  • Penetration Tester

    4 weeks ago


    Taguig, Philippines Nityo Infotech Full time

    LOCATION: Taguig SCHEDULE: UK Shift 4pm to 1am WORK SETUP: Remote (will report to office as a needed basis only) QUALIFICATIONS: * Education: A bachelor’s degree in a related field such as computer science, information security, or cybersecurity is commonly preferred, but not always mandatory. Relevant industry experience can compensate for formal...

  • Penetration Tester

    2 weeks ago


    Taguig, National Capital Region, Philippines Nityo Infotech Full time

    LOCATION:TaguigSCHEDULE:UK Shift 4pm to 1amWORK SETUP:Remote (will report to office as a needed basis only)QUALIFICATIONS: Education: A bachelor's degree in a related field such as computer science, information security, or cybersecurity is commonly preferred, but not always mandatory. Relevant industry experience can compensate for formal education...

  • Penetration Tester

    2 weeks ago


    Taguig, National Capital Region, Philippines weSource Management Consultancy Firm Full time

    The Role A penetration tester is responsible for assessing the security of web applications and its underlying infrastructure to identify vulnerabilities and weaknesses that could be exploited by attackers. Their role involves conducting thorough assessments and penetration tests to uncover potential security risks and provide recommendations for mitigation....

  • Penetration Tester

    1 month ago


    Taguig, Philippines Nityo Infotech Services Philippines Inc. Full time

    Location: BGC, Taguig (WFH, will report onsite as needed only) Schedule: UK Shift - 4 pm - 1 am The Role A penetration tester is responsible for assessing the security of web applications and its underlying infrastructure to identify vulnerabilities and weaknesses that could be exploited by attackers. Their role involves conducting thorough assessments and...

  • Penetration Tester

    2 weeks ago


    Taguig, National Capital Region, Philippines Nityo Infotech Services Philippines Inc. Full time

    Location: BGC, Taguig (WFH, will report onsite as needed only)Schedule: UK Shift - 4 pm - 1 amThe RoleA penetration tester is responsible for assessing the security of web applications and its underlying infrastructure to identify vulnerabilities and weaknesses that could be exploited by attackers. Their role involves conducting thorough assessments and...

  • Penetration Tester

    4 weeks ago


    Taguig, Philippines Nityo Infotech Services Philippines Inc. Full time

    Location: BGC, Taguig (WFH, will report onsite as needed only) Schedule: UK Shift - 4 pm - 1 am The Role A penetration tester is responsible for assessing the security of web applications and its underlying infrastructure to identify vulnerabilities and weaknesses that could be exploited by attackers. Their role involves conducting thorough assessments and...

  • Penetration Tester

    1 month ago


    Taguig, Philippines Nityo Infotech Full time

    The Requirements Minimum Criteria: Education: A bachelor’s degree in a related field such as computer science, information security, or cybersecurity is commonly preferred, but not always mandatory. Relevant industry experience can compensate for formal education requirements. Technical Knowledge: A strong understanding of web technologies, programming...

  • Penetration Tester

    4 weeks ago


    Taguig, Philippines Nityo Infotech Full time

    The Requirements Minimum Criteria: Education: A bachelor’s degree in a related field such as computer science, information security, or cybersecurity is commonly preferred, but not always mandatory. Relevant industry experience can compensate for formal education requirements. Technical Knowledge: A strong understanding of web technologies, programming...

  • Penetration Tester

    1 month ago


    Taguig, Philippines Nityo Infotech Full time

    The Requirements Minimum Criteria: Education: A bachelor’s degree in a related field such as computer science, information security, or cybersecurity is commonly preferred, but not always mandatory. Relevant industry experience can compensate for formal education requirements. Technical Knowledge: A strong understanding of web technologies, programming...

  • Penetration Tester

    4 weeks ago


    Taguig, Philippines Nityo Infotech Full time

    The Requirements Minimum Criteria: Education: A bachelor’s degree in a related field such as computer science, information security, or cybersecurity is commonly preferred, but not always mandatory. Relevant industry experience can compensate for formal education requirements. Technical Knowledge: A strong understanding of web technologies, programming...

  • Penetration Tester

    2 weeks ago


    Taguig, National Capital Region, Philippines Nityo Infotech Full time

    The RequirementsMinimum Criteria:Education: A bachelor's degree in a related field such as computer science, information security, or cybersecurity is commonly preferred, but not always mandatory. Relevant industry experience can compensate for formal education requirements.Technical Knowledge: A strong understanding of web technologies, programming...

  • Penetration Tester

    1 month ago


    Taguig, Philippines Nityo Infotech Full time

    The RequirementsMinimum Criteria:Education: A bachelor’s degree in a related field such as computer science, information security, or cybersecurity is commonly preferred, but not always mandatory. Relevant industry experience can compensate for formal education requirements.Technical Knowledge: A strong understanding of web technologies, programming...

  • Penetration Tester

    4 weeks ago


    Taguig, Philippines Nityo Infotech Full time

    The RequirementsMinimum Criteria:Education: A bachelor’s degree in a related field such as computer science, information security, or cybersecurity is commonly preferred, but not always mandatory. Relevant industry experience can compensate for formal education requirements.Technical Knowledge: A strong understanding of web technologies, programming...

  • Apply Now

    2 weeks ago


    Taguig, National Capital Region, Philippines KMC Solutions Full time

    Make your next big career move by applying as KMC Solutions' next Intrusion Tester / Penetration TesterIntrusion testers are part of the security testing services team and performs various types of security tests for clients. Tests may include wireless network assessments, web application testing, internal network assessments, external network assessments,...