Cybersecurity Consultant | Makati

HRTX; Philippines; On-site; PHP 600,000 - 1,200,000; Full time

Job summary

HRTX is seeking a Cybersecurity Consultant in Makati, Philippines. The role focuses on vulnerability assessment and penetration testing, with SMEs in infrastructure or application security.

You will provide consultative recommendations and use manual testing to deeply understand apps and mobile environments. Responsibilities include documenting findings and presenting to both technical teams and operations/management.

Qualifications

• 3+ years in Information Technology.
• 2–3 years in security testing (VAPT, code review, configuration/architecture/controls).
• Strong knowledge of Infrastructure, API and Mobile App development (preferred).
• In-depth knowledge of OWASP Top 10 and CVEs; ability to communicate methods with teams.

Responsibilities

• Performs Vulnerability Assessment and Penetration Testing.
• SME in Infrastructure and/or Application Security; provides consultative recommendations.
• Uses manual testing techniques to understand applications/mobile environments and reduce false negatives.
• Documents findings and recommendations, and presents to stakeholders from technical and non-technical teams.

Skills

VAPT

Penetration Testing

Security Consulting

OWASP Top 10

Cloud Security

Unix/Linux/Windows

Communication

ISMS/ISO27001

CISA/CEH

Tools

Nessus

Burp Suite

Qualys

OSCP

Job description

About the job Cybersecurity Consultant | Makati

Job Responsibilities:

• Performs Vulnerability Assessment and Penetration Testing
• SME in Infrastructure and/or Application Security and provides consultative recommendations in discussions related to Vulnerability Assessment and Penetration Testing
• Uses manual testing techniques and methods to gain a better understanding of the applications/mobile app environment and reduce false negatives
• Documents findings and recommendations, and present with stakeholders from technical team (Development, Infrastructure) and non-technical team (Operations, Management)

Qualifications:

• Has more than 3 years of experience in Information Technology
• Must have at least2-3 years of experience in security testing (VAPT, Source Code Review, Configuration Review, Architecture Review, Controls Review) (Preferred)
• Strong knowledge in System & Network Infrastructure, API and Mobile Application Development (Preferred)
• In-depth knowledge of OWASP Top 10 and CVEs, and the ability to effectively communicate methodologies and techniques with development teams and operations
• Basic knowledge on information security standards and guidelines such ISO 27001/2, NIST, and CIS
• Hands-on experience with security testing tools such as Nessus, Burpsuite, Qualys and others
• Understanding of Cloud Compute, Storage, Security and Virtualization best practice
• Experience of working on Unix, Windows & Linux platforms
• Has good communication skills to explain technical details with both technical team and non-technical team
• Has at least one of the following certifications
• EC Council CEH or Mile2 CPEH (Preferred Primary)
• CompTIA Security +
• ISMS Lead Auditor or ISACA CISA
• Other certifications with ISC2, CompTIA, EC Council, OSCP, CREST or SANS