Cyber Security Engineer

Lennor Group; Philippines; On-site; PHP 812,000 - 973,000; Full time

Job summary

PaxSigna, a specialist talent solutions division of the Lennor Group, is seeking a skilled VAPT professional for client engagements in the Philippines. The role focuses on conducting web and mobile application security testing, delivering actionable findings, and guiding remediation with cross‑functional teams.

The ideal candidate has 3–5 years of hands‑on VAPT experience, familiarity with OWASP Top 10, and proficiency with tools like Kali Linux, Metasploit, Burp Suite, and ZAP.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, or a related field.
• 3–5 years of hands‑on experience conducting web and mobile application vulnerability assessments and penetration testing using the OWASP Top 10 framework.
• Experience with open-source and commercial security testing tools like Kali Linux, Metasploit, Qualys, Nessus, Burp Suite, and OWASP ZAP.

Responsibilities

• Conduct vulnerability assessments and penetration testing (VAPT) on web and mobile applications.
• Prepare detailed assessment reports with findings and remediation recommendations.
• Provide technical assistance to development teams for remediation of vulnerabilities.
• Organize and facilitate meetings to coordinate VAPT activities.
• Independently manage activities, schedules, and tickets to ensure timely deliverables.
• Submit progress reports on activities and findings to supervisors.
• Maintain confidentiality and security of client information.

Skills

VAPT

OWASP Top 10

Security reporting

Communication

Education

Bachelor's degree in IT/CS

Tools

Kali Linux

Metasploit

Qualys

Nessus

Burp Suite

OWASP ZAP

Job description

Company Overview

Our client is an organization operating within the BPO Industry, focused on providing tech solutions for their partners. The company serves the North American, European, and APAC regions, and is committed to delivering quality solutions, operational excellence, and sustainable business growth. Additional information about the organization will be shared with selected candidates at the appropriate stage of the recruitment process.

Location

Taguig, Philippines

Work Setup

Onsite

Compensation Range

up to ₱80,000 per month

Compensation Flexibility

Open to negotiation for highly qualified candidates.

Key Responsibilities

• Conduct vulnerability assessments and penetration testing (VAPT) on web and mobile applications, following established security testing methodologies and frameworks.
• Prepare detailed assessment reports outlining identified vulnerabilities, findings, and remediation recommendations in accordance with the client's preferred reporting format, when available.
• Provide technical assistance and consultation to development and remediation teams to support the resolution of identified security vulnerabilities.
• Organize and facilitate meetings or consultation sessions, as needed, to coordinate and complete VAPT activities.
• Independently manage assigned activities, project schedules, and tickets to ensure timely completion of deliverables.
• Submit regular progress reports to immediate supervisors, providing updates on assessment activities, findings, and outstanding issues.
• Maintain the confidentiality and security of all client information throughout assessment and reporting activities.

Required Qualifications

• Bachelor's degree in Information Technology, Computer Science, or a related field.
• At least 3-5 years of hands‑on experience conducting web and mobile application vulnerability assessments and penetration testing using the OWASP Top 10 testing framework.
• Working experience with open-source and commercial security testing tools, such as Kali Linux, Metasploit, Qualys, Nessus, Burp Suite, and OWASP ZAP.
• Working knowledge of web application and mobile application development, including common application architectures and security considerations.

Preferred Qualifications

• Ability to prepare clear, detailed VAPT reports that communicate technical findings and remediation recommendations to both technical and non‑technical audiences.
• Relevant cybersecurity certifications, such as Certified Ethical Hacker (CEH), Certified Information Systems Security Professional (CISSP), or equivalent industry certifications.
• Experience providing security consultation and collaborating with development teams to remediate application vulnerabilities.

Required Skills & Technologies

• Vulnerability Assessment & Penetration Testing: Web application VAPT, mobile application VAPT, vulnerability identification, validation, and remediation recommendations.
• Security Frameworks: OWASP Top 10 and application security testing methodologies.
• Security Testing Tools: Kali Linux, Metasploit, Qualys, Nessus, Burp Suite, OWASP ZAP, and equivalent tools.
• Application Development: Working knowledge of web and mobile application development, architecture, and common security vulnerabilities.
• Reporting & Documentation: VAPT assessment reports, technical documentation, progress reporting, and remediation guidance.
• Project & Activity Management: Schedule management, ticket ownership, progress tracking, and coordination of VAPT activities.
• Core Competencies: Analytical thinking, problem‑solving, communication, attention to detail, stakeholder collaboration, and confidentiality.

About Paxsigna

PaxSigna is a specialist talent solutions division of the Lennor Group focused on Technology, Semiconductor & Electronics, and Advanced Engineering. We partner with startups, growth‑stage businesses, and multinational enterprises to connect exceptional talent with transformative opportunities across highly specialized markets.

EQUAL OPPORTUNITY STATEMENT

PaxSigna is committed to fostering an inclusive and equitable recruitment process. All qualified applicants will receive consideration based on their qualifications, experience, capabilities, and business requirements.

DATA PRIVACY NOTICE

By submitting your application, you acknowledge that your personal information may be collected, processed, stored, and shared with authorized stakeholders solely for recruitment-related purposes in accordance with applicable data privacy laws and regulations.

LEGAL NOTICE

PaxSigna is a specialist talent solutions division of the Lennor Group. Recruitment and talent acquisition services are facilitated through Lennor Metier Consulting Philippines, Inc., the group's duly registered operating entity in the Philippines.