Cybersecurity Consultant | Makati

HRTX; Makati; On-site; PHP 600,000 - 800,000; Full time

Job summary

A leading cybersecurity firm in Makati is seeking an experienced Cybersecurity Consultant to perform vulnerability assessments and penetration testing. The ideal candidate will have over three years of experience in Information Technology and at least two years in security testing, with strong knowledge in network infrastructure and application security. Certifications such as CEH or CompTIA Security + are preferred. This role offers competitive benefits and opportunities for professional growth.

Qualifications

• More than 3 years of experience in Information Technology.
• 2-3 years of experience in security testing (VAPT, Source Code Review).
• In-depth knowledge of OWASP Top 10 and CVEs.

Responsibilities

• Perform Vulnerability Assessment and Penetration Testing.
• Provide consultative recommendations in security discussions.
• Document findings and present to stakeholders.

Skills

Vulnerability Assessment

Penetration Testing

System & Network Infrastructure

API Development

Mobile Application Development

Communication Skills

Education

EC Council CEH

CompTIA Security +

ISMS Lead Auditor

ISACA CISA

Tools

Nessus

Burpsuite

Qualys

Job description

About the job Cybersecurity Consultant | Makati

Job Responsibilities:

• Performs Vulnerability Assessment and Penetration Testing
• SME in Infrastructure and/or Application Security and provides consultative recommendations in discussions related to Vulnerability Assessment and Penetration Testing
• Uses manual testing techniques and methods to gain a better understanding of the applications/mobile app environment and reduce false negatives
• Documents findings and recommendations, and present with stakeholders from technical team (Development, Infrastructure) and non-technical team (Operations, Management)

Qualifications:

• Has more than 3 years of experience in Information Technology
• Must have at least2-3 years of experience in security testing (VAPT, Source Code Review, Configuration Review, Architecture Review, Controls Review) (Preferred)
• Strong knowledge in System & Network Infrastructure, API and Mobile Application Development (Preferred)
• In-depth knowledge of OWASP Top 10 and CVEs, and the ability to effectively communicate methodologies and techniques with development teams and operations
• Basic knowledge on information security standards and guidelines such ISO 27001/2, NIST, and CIS
• Hands‑on experience with security testing tools such as Nessus, Burpsuite, Qualys and others
• Understanding of Cloud Compute, Storage, Security and Virtualization best practice
• Experience of working on Unix, Windows & Linux platforms
• Has good communication skills to explain technical details with both technical team and non-technical team
• Has at least one of the following certifications
• EC Council CEH or Mile2 CPEH (Preferred Primary)
• CompTIA Security +
• ISMS Lead Auditor or ISACA CISA
• Other certifications with ISC2, CompTIA, EC Council, OSCP, CREST or SANS