Security Vulnerability and Penetration Testing

3 days ago

Taguig, National Capital Region, Philippines HRTX Full time $100,000 - $120,000 per year


Role Purpose

To oversee and serve as a technical resource for all assessment activity related to the security posture of existing and proposed firm systems, platforms, and processes to protect and continually improve the confidentiality, integrity, and availability of information systems per the firm's business objectives, regulatory requirements, and strategic goals.

Responsibilities

  • Perform security penetration testing of the Firms systems, platforms, and applications
  • Serve as a Subject Matter Expert (SME) for the VAPT function
  • Serve as the system owner for common VAPT toolsets, platforms, and processes
  • Provide technical assessment reports that are easily understandable by the target audience and include practical and reasonable recommendations based upon sound risk management principles.

Qualification

  • Possess a Computer Science bachelors degree or substantially equivalent experience
  • CISSP required
  • GIAC GPEN or GWAPT preferred
  • Offensive Security OSCP required
  • Commanding knowledge of VAPT concepts and best practices, including the requirements for WhiteHat/ethical hacking
  • Expert understanding of the difference between a vulnerability assessment and a penetration test in the context of assessment scope, objectives, and deliverables
  • Extensive experience with common automated VAPT tools such as Nessus, Appscan, Burp Suite, Nipper, and Trustwave
  • Expertise with common attack tools and frameworks such as Wireshark, Kali, Metasploit, etc.
  • Expertise with mobile platform security technology, including vulnerability identification and exploitation tools, as well as mobile platform security best practices, frameworks, etc.
  • Understands VAPT in the context of risk management and organizational priorities
  • Passionate in the practice and pursuit of VAPT excellence
  • Able to validate the presence of identified vulnerabilities with accuracy
  • Mastery of common application platforms and technologies to effectively understand and evaluate complex application assessments via the use of manual techniques and simple tools such as proxies and browser plugins
  • Authoritative mastery of OWASP, CVE, general security controls, and other foundational topics, such as the latest application and operating system exploits
  • Expert knowledge of common scripting and programming languages is advantageous.
  • Ongoing commitment to understanding the threat landscape and common adversary motivations/practices. Ability to quickly adapt practices to evolving circumstances
  • Able to maintain critical thinking and composure under pressure
  • Strong written and oral communication skills. Ability to convey complex concepts to non-technical constituents. Proficiency in oral and written English
  • Capable of assisting with the preparation of internal training materials and documentation
  • Able to be productive and maintain focus without direct supervision

  • Security Vulnerability and Penetration Testing Engineer

    2 weeks ago

    Taguig, National Capital Region, Philippines HCM Nexus Consulting Inc. Full time ₱1,200,000 - ₱2,400,000 per year

    Security Vulnerability and Penetration Testing EngineerWork Setup: Hybrid (8x onsite per month - BGC, Taguig)Schedule: Morning shift (8:00 AM - 5:00 PM or 9:00 AM – 6:00 PM)Must be amenable to render overtime, work on weekends and/or Philippine holidays if needed.About the RoleThe Security Vulnerability and Penetration Testing Engineer is responsible for...

  • Vulnerability Assessment and Penetration Testing Engineer

    1 week ago

    Taguig, National Capital Region, Philippines Robert Walters Full time ₱1,500,000 - ₱3,000,000 per year

    A leading global organisation is seeking a Vulnerability Assessment and Penetration Testing Engineer to join their expert security team in Taguig.This role offers you the opportunity to make a significant impact on the protection and continual improvement of critical information systems, ensuring they meet business objectives, regulatory requirements, and...

  • Security Vulnerability and Penetration Testing Engineer

    2 weeks ago

    Taguig, National Capital Region, Philippines EPS CONSULTANT Full time ₱900,000 - ₱1,200,000 per year

    Role Purpose:To oversee and serve as a technical resource for all assessment activities related to the security posture of existing and proposed firm systems, platforms, and processes to protect and continually improve the confidentiality, integrity, and availability of information systems per the firm's business objectives, regulatory requirements, and...

  • Security Vulnerability

    2 days ago

    Taguig, National Capital Region, Philippines Monroe Consulting Group Full time ₱60,000 - ₱120,000 per year

    Executive search firm Monroe Consulting Group Philippines is recruiting on behalf of a renowned knowledge process outsourcing of a global law firm. TheSecurity Vulnerability and Penetration Testing Engineerwill oversee and serve as a technical resource for all assessment activities related to the security posture of existing and proposed firm systems,...

  • Penetration Tester

    6 days ago

    Taguig, National Capital Region, Philippines Yondu, Inc. Full time ₱800,000 - ₱1,200,000 per year

    Penetration Tester (VAPT)*THIS IS FOR PHILIPPINE RESIDENTS / FILIPINO APPLICANTS ONLY*GENERAL RESPONSIBILITIES:The Penetration Tester conducts penetration testing and vulnerability assessments to identify potential security risks in applications, networks, and IT infrastructure. The role involves collaborating with teams to remediate identified...

  • Penetration Tester

    2 days ago

    Taguig, National Capital Region, Philippines YONDU INC. Full time

    The Penetration Tester conducts penetration testing and vulnerability assessments to identify potential security risks in applications, networks, and IT infrastructure. The role involves collaborating with teams to remediate identified vulnerabilities, staying updated with the latest security trends, and ensuring alignment with organizational security goals....

  • Penetration Tester

    2 days ago

    Taguig, National Capital Region, Philippines weSource Management Consultancy Firm Full time ₱1,200,000 - ₱2,400,000 per year

    The RoleA penetration tester is responsible for assessing the security of web applications and its underlying infrastructure to identify vulnerabilities and weaknesses that could be exploited by attackers. Their role involves conducting thorough assessments and penetration tests to uncover potential security risks and provide recommendations for...

  • Application Security SME

    3 days ago

    Taguig, National Capital Region, Philippines Pan Asia Resources PH Inc. Full time ₱100,000 - ₱120,000 per year

    Required Technical SkillsetDevsecops & API security controls- (Nexus, SonarQube, Trivvy) from RHOCP RACVulnerability Assessment/Penetration Testing - SaaS/Digital Facing Solutions (Cyberint)Exp: 8+ years / ManilaPrimary SkillsServe as the Application Security (AppSec) Subject Matter Expert for the organization's SaaS/Digital Facing Solutions.Lead and execute...

  • Security Consultant

    2 days ago

    Taguig, National Capital Region, Philippines Theos Cyber Solutions Ltd. Full time ₱1,200,000 - ₱2,400,000 per year

    About TheosOur mission is to empower businesses to thrive in the new digital security age by helping define and execute strategies to achieve cyber resilience. Practical steps instead of silver bullets. We are a team of experts in key security domains, including Penetration Testing, Red Teaming, Managed Detection & Response, and Digital Forensics and...

  • Security Operations Engineer

    2 weeks ago

    Taguig, National Capital Region, Philippines WTW Full time ₱900,000 - ₱1,200,000 per year

    DescriptionThe RoleAs a Security Operations Engineer, you will analyze software designs and implementations from a security perspective and identify and propose resolutions to security issues.You will include the appropriate security analysis, tooling and techniques to uncover InfoSec vulnerabilities, both static and dynamically, in our software...