Cyber Security Engineer

Lennor Group; Metro Manila; On-site; PHP 536,000 - 893,000; Full time

Job summary

PaxSigna is seeking a skilled VAPT Analyst for our Taguig, Philippines location. The role is onsite, focusing on web and mobile security testing, OWASP Top 10 alignment, and producing detailed risk reports.

You will work with Kali Linux, Burp Suite, Metasploit, and other tools to identify vulnerabilities and guide remediation. The ideal candidate holds a bachelor’s degree in IT/CS with 3–5 years of hands‑on VAPT experience, and can communicate findings to technical and non‑technical

Qualifications

• Bachelor’s degree in IT or CS or related field.
• 3–5 years hands‑on web/mobile vulnerability assessments and testing with OWASP Top 10.
• Experience with Kali Linux, Metasploit, Qualys, Nessus, Burp Suite, OWASP ZAP.
• Knowledge of web/mobile app architectures and security considerations.

Responsibilities

• Conduct vulnerability assessments and penetration testing (VAPT) on web and mobile apps.
• Prepare detailed assessment reports with findings and remediation recommendations.
• Provide expert guidance to development/remediation teams to fix vulnerabilities.
• Organize meetings to coordinate VAPT activities and timelines.
• Independently manage activities, schedules, and tickets to deliver on time.
• Submit progress reports on assessment activities and open issues.
• Maintain confidentiality and security of client information.

Skills

VAPT

OWASP Top 10

Web security

Mobile security

Burp Suite

Kali Linux

Metasploit

Nessus

Qualys

OWASP ZAP

Education

Bachelor's degree in Information Technology, Computer Science, or a related field

Tools

Kali Linux

Metasploit

Qualys

Nessus

Burp Suite

OWASP ZAP

Job description

Job Description:

Company Overview

Our client is an organization operating within the BPO Industry, focused on providing tech solutions for their partners. The company serves the North American, European, and APAC regions, and is committed to delivering quality solutions, operational excellence, and sustainable business growth. Additional information about the organization will be shared with selected candidates at the appropriate stage of the recruitment process.

Location

Taguig, Philippines

Work Setup

Onsite

Compensation Range

up to ₱80,000 per month

Compensation Flexibility

Open to negotiation for highly qualified candidates.

Key Responsibilities

• Conduct vulnerability assessments and penetration testing (VAPT) on web and mobile applications, following established security testing methodologies and frameworks.
• Prepare detailed assessment reports outlining identified vulnerabilities, findings, and remediation recommendations in accordance with the client's preferred reporting format, when available.
• Provide technical assistance and consultation to development and remediation teams to support the resolution of identified security vulnerabilities.
• Organize and facilitate meetings or consultation sessions, as needed, to coordinate and complete VAPT activities.
• Independently manage assigned activities, project schedules, and tickets to ensure timely completion of deliverables.
• Submit regular progress reports to immediate supervisors, providing updates on assessment activities, findings, and outstanding issues.
• Maintain the confidentiality and security of all client information throughout assessment and reporting activities.

Required Qualifications

• Bachelor's degree in Information Technology, Computer Science, or a related field.
• At least 3-5 years of hands‑on experience conducting web and mobile application vulnerability assessments and penetration testing using the OWASP Top 10 testing framework.
• Working experience with open-source and commercial security testing tools, such as Kali Linux, Metasploit, Qualys, Nessus, Burp Suite, and OWASP ZAP.
• Working knowledge of web application and mobile application development, including common application architectures and security considerations.

Preferred Qualifications

• Ability to prepare clear, detailed VAPT reports that communicate technical findings and remediation recommendations to both technical and non‑technical audiences.
• Relevant cybersecurity certifications, such as Certified Ethical Hacker (CEH), Certified Information Systems Security Professional (CISSP), or equivalent industry certifications.
• Experience providing security consultation and collaborating with development teams to remediate application vulnerabilities.

Required Skills & Technologies

• Vulnerability Assessment & Penetration Testing: Web application VAPT, mobile application VAPT, vulnerability identification, validation, and remediation recommendations.
• Security Frameworks: OWASP Top 10 and application security testing methodologies.
• Security Testing Tools: Kali Linux, Metasploit, Qualys, Nessus, Burp Suite, OWASP ZAP, and equivalent tools.
• Application Development: Working knowledge of web and mobile application development, architecture, and common security vulnerabilities.
• Reporting & Documentation: VAPT assessment reports, technical documentation, progress reporting, and remediation guidance.
• Project & Activity Management: Schedule management, ticket ownership, progress tracking, and coordination of VAPT activities.
• Core Competencies: Analytical thinking, problem‑solving, communication, attention to detail, stakeholder collaboration, and confidentiality.

About Paxsigna

PaxSigna is a specialist talent solutions division of the Lennor Group focused on Technology, Semiconductor & Electronics, and Advanced Engineering. We partner with startups, growth‑stage businesses, and multinational enterprises to connect exceptional talent with transformative opportunities across highly specialized markets.

EQUAL OPPORTUNITY STATEMENT

PaxSigna is committed to fostering an inclusive and equitable recruitment process. All qualified applicants will receive consideration based on their qualifications, experience, capabilities, and business requirements.

DATA PRIVACY NOTICE

By submitting your application, you acknowledge that your personal information may be collected, processed, stored, and shared with authorized stakeholders solely for recruitment-related purposes in accordance with applicable data privacy laws and regulations.

LEGAL NOTICE

PaxSigna is a specialist talent solutions division of the Lennor Group. Recruitment and talent acquisition services are facilitated through Lennor Metier Consulting Philippines, Inc., the group's duly registered operating entity in the Philippines.