Application Security Specialist — Hybrid, Wellness & Growth

Home Credit Philippines; Taguig; Hybrid; PHP 900,000 - 1,200,000; Full time

Benefits offered by this job

Hybrid work setup

Performance bonus

HMO from day 1

Mental health support

Wellness leave

Job summary

Home Credit Philippines is seeking an Application Security Specialist with at least 3 years of hands-on security testing experience. The role focuses on assessing mobile and web applications, APIs, and cloud resources, conducting pen tests, and delivering clear remediation guidance to varied IT teams.

The ideal candidate understands security frameworks, uses BurpSuite or Kali proficiently, and participates in ongoing vulnerability management and risk reduction.

Qualifications

• : At least 3 years experience in application security testing.
• : Hands-on experience in web and mobile application penetration testing.
• : Solid understanding of application security frameworks and security testing principles and techniques.
• : Must have practical skills on the use of various penetration testing tools e.g., BurpSuite or Kali.
• : Familiar with the use of vulnerability management tools.

Responsibilities

• Perform Application Security assessments on internal and external systems (Android/iOS apps, web apps, APIs).
• Conduct periodic penetration tests on networks, applications, infrastructure, and cloud resources.
• Create assessment reports for product owners after every pen test.
• Review IT projects with teams to recommend security controls and design features.
• Identify and maintain register of IT risks and track mitigating activities.
• Manage periodic vulnerability scans, policy compliance scans, and code reviews.

Skills

Penetration testing

Web/mobile apps

Security frameworks

Tools

BurpSuite

Kali Linux

Job description

Home Credit Philippines is seeking an Application Security Specialist with at least 3 years of hands-on security testing experience. The role focuses on assessing mobile and web applications, APIs, and cloud resources, conducting pen tests, and delivering clear remediation guidance to varied IT teams.

The ideal candidate understands security frameworks, uses BurpSuite or Kali proficiently, and participates in ongoing vulnerability management and risk reduction.