Application Security Engineer – Pen Testing & Vulnerability

Home Credit Philippines; Taguig; Hybrid; PHP 800,000 - 1,100,000; Full time

Benefits offered by this job

Hybrid work setup

Performance bonus (up to 20%)

HMO on Day 1 and dependents

Job summary

Home Credit Philippines is seeking an Application Security professional to lead vulnerability management and perform penetration testing on internal and external systems, including mobile apps and web services. You will collaborate with IT and product teams to mitigate risks and ensure secure architectures.

The role emphasizes hands-on testing, familiarity with security frameworks, and ongoing monitoring of threats, with a hybrid work setup and opportunities for growth within the security

Qualifications

• At least 3 years of experience in application security testing.
• Hands-on experience in web and mobile application penetration testing.
• Solid understanding of application security frameworks and testing principles and techniques.
• Practical skills with penetration testing tools such as BurpSuite or Kali.
• Familiarity with vulnerability management tools.

Responsibilities

• Perform application security assessments on internal and external systems.
• Conduct periodic penetration tests on networks, apps, infrastructure, and cloud resources.
• Create assessment reports for product owners after each test.
• Collaborate with IT teams to review and implement security controls.
• Identify and maintain the IT risk register; track mitigating activities.

Skills

Application security testing

Web & mobile pentesting

Security testing principles

Penetration testing tools usage

Vulnerability management familiarity

Tools

BurpSuite

Kali Linux

Vulnerability scanners

Job description

Home Credit Philippines is seeking an Application Security professional to lead vulnerability management and perform penetration testing on internal and external systems, including mobile apps and web services. You will collaborate with IT and product teams to mitigate risks and ensure secure architectures.

The role emphasizes hands-on testing, familiarity with security frameworks, and ongoing monitoring of threats, with a hybrid work setup and opportunities for growth within the security