Associate Security Consultant

HRTX; Philippines; On-site; PHP 420,000 - 780,000; Full time

Job summary

HRTX seeks an Associate Security Consultant to conduct vulnerability assessments and penetration testing across infrastructure and applications. You will document findings, and present with technical and non-technical stakeholders, offering risk-based recommendations.

Role requires hands-on testing, OWASP Top 10/CVE knowledge, security standards familiarity, and tool experience. Strong communication is essential; CEH/CompTIA Security+ and related certs are preferred.

Qualifications

• Over 3 years of IT experience.
• 2–3 years in security testing (VAPT, code review, config/architecture/controls).
• Strong knowledge of infrastructure, APIs and mobile development.
• In-depth knowledge of OWASP Top 10 and CVEs.
• Familiar with ISO 27001/NIST/CIS standards.
• Hands-on testing tools: Nessus, Burp Suite, Qualys.
• Experience with Unix/Windows/Linux.
• Good communication with technical and non-technical teams.
• Certifications such as CEH or CPEH, CompTIA Security+, ISMS Lead Auditor or CISA; ISC2/SANS/CREST are a plus.

Responsibilities

• Perform vulnerability assessment and penetration testing.
• Serve as SME in security infra/app security and advise on VA/PT.
• Use manual testing to reduce false negatives.
• Document findings and present to stakeholders.

Job description

About the job Associate Security Consultant

• Performs Vulnerability Assessment and Penetration Testing
• SME in Infrastructure and/or Application Security and provides consultative recommendations in discussions related to Vulnerability Assessment and Penetration Testing
• Uses manual testing techniques and methods to gain a better understanding of the applications/mobile app environment and reduce false negatives.
• Documents findings and recommendations, and present with stakeholders from technical team (Development, Infrastructure) and non-technical team (Operations, Management)

Qualification

• Has more than 3 years experience in Information Technology
• Specific 2-3 years experience in security testing (VAPT, Source Code Review, Configuration Review, Architecture Review, Controls Review) (Preferred)
• Strong knowledge in System & Network Infrastructure, API and Mobile Application Development (Preferred)
• In-depth knowledge of OWASP Top 10 and CVEs, and the ability to effectively communicate methodologies and techniques with development teams and operations
• Basic knowledge on information security standards and guidelines such ISO 27001/2, NIST, and CIS
• Hands-on experience with security testing tools such as Nessus, Burpsuite, Qualys and others
• Understanding of Cloud Compute, Storage, Security and Virtualization best practice
• Experience of working on Unix, Windows & Linux platform
• Has good communication skills to explain technical details with both technical team and non-technical team
• Has at least one of the following certifications:
• EC Council CEH or Mile2 CPEH (Preferred Primary)
• CompTIA Security +
• ISMS Lead Auditor or ISACA CISA
• Other certifications with ISC2, CompTIA, EC Council, OSCP, CREST or SANS