AppSec Penetration Tester & Security Risk Lead

Home Credit Philippines; Philippines; Hybrid; PHP 700,000 - 1,100,000; Full time

Benefits offered by this job

Hybrid work setup

Bonus up to 20%

HMO on Day 1 and dependents

Mental health support

Wellness leaves

Internal career mobility

Learning opportunities

Job summary

Home Credit Philippines is seeking an Application Security professional to lead vulnerability management and penetration testing across systems, apps, and cloud resources. You will collaborate with IT and product teams to remediate findings and strengthen security controls.

A focus on hybrid work arrangements and growth opportunities is emphasized. The role requires hands-on testing across web and mobile platforms, familiarity with industry frameworks, and a proactive approach to threat

Qualifications

• 3+ years in application security testing.
• Hands-on experience in web and mobile application penetration testing.
• Solid understanding of application security frameworks and principles.
• Practical skills with BurpSuite or Kali.
• Familiar with vulnerability management tools.

Responsibilities

• Perform app security assessments on internal/external systems (web/mobile/app APIs).
• Conduct periodic penetration tests on networks, apps, infrastructure, and cloud assets.
• Create assessment reports for product owners after each test.
• Collaborate with IT teams to recommend secure designs for projects.
• Identify and maintain IT risk registers; track mitigating actions.
• Manage vulnerability scans and policy compliance checks.
• Assist in IT security assessments and compliance checks.
• Stay up to date with threats and suggest countermeasures.
• Respond to ad-hoc security assessment requests.
• Coordinate with teams for automated security tests.

Skills

Application security testing

Web and mobile pentesting

Security frameworks understanding

Tools

BurpSuite

Kali Linux

Vulnerability management tools

Job description

Home Credit Philippines is seeking an Application Security professional to lead vulnerability management and penetration testing across systems, apps, and cloud resources. You will collaborate with IT and product teams to remediate findings and strengthen security controls.

A focus on hybrid work arrangements and growth opportunities is emphasized. The role requires hands-on testing across web and mobile platforms, familiarity with industry frameworks, and a proactive approach to threat