Cybersecurity Penetration Tester

SD Solutions I.T. Outsourcing, Inc.; Pasig; On-site; PHP 800,000 - 1,200,000; Full time

Job summary

SD Solutions I.T. Outsourcing, Inc. is seeking a Cybersecurity Penetration Tester to identify and exploit vulnerabilities in web apps, APIs, networks, and cloud environments. You will simulate real-world attacks, assess risks, and report remediation steps.

The ideal candidate has a minimum of 3 years in security testing, hands-on experience with Burp Suite, Nmap, Metasploit, and scripting (Python/JavaScript/Bash). Applicants should work with minimal supervision in a fast-paced setting.

Qualifications

• Bachelor's degree in Computer Science/IT or related field.
• At least 3 years of penetration testing experience.
• Experience with Burp Suite, Nmap, and Metasploit.
• Proficient in Python, JavaScript, or Bash.
• Knowledge of web security, networking, OS, databases, and cloud tech.
• Familiarity with OWASP Top 10 and security frameworks.
• Strong analytical, communication, and reporting skills.
• Able to work with minimal supervision to meet tight deadlines.

Responsibilities

• Perform penetration testing across applications, networks, and infrastructure.
• Identify vulnerabilities, misconfigurations, and attack vectors.
• Use manual and automated tools to simulate real-world attacks.
• Analyze findings and prioritize remediation with risk context.
• Prepare detailed reports with findings and recommendations.
• Collaborate with IT and development teams to remediate issues.
• Stay updated on threats, best practices, and ethical testing standards.
• Ensure testing complies with authorized scope.

Skills

Python

JavaScript

Bash

Analytical thinking

Communication skills

Education

Bachelor's Degree in Computer Science/IT or related

Tools

Burp Suite

Nmap

Metasploit

Job description

Job Purpose:

A Cybersecurity Penetration Tester is responsible for identifying, assessing, and exploiting security vulnerabilities in web applications, APIs, networks, cloud environments, and IT infrastructure through authorized security testing. The role helps protect organizational systems and data by simulating real-world cyberattacks, evaluating security risks, and recommending effective remediation measures.

Essential Duties & Responsibilities:

• Conduct penetration testing and vulnerability assessments across applications, networks, and infrastructure.
• Identify security weaknesses, misconfigurations, and potential attack vectors.
• Use manual testing techniques and automated security tools to simulate cyberattacks.
• Analyze vulnerabilities, assess business impact, and prioritize risks.
• Prepare detailed penetration testing reports with findings and remediation recommendations.
• Collaborate with IT, development, and cybersecurity teams to resolve vulnerabilities.
• Validate security fixes and stay updated on emerging threats and industry best practices.
• Ensure all testing activities comply with ethical standards and authorized scope.
• Initiate and execute red teaming activities

Minimum Requirements:

• Candidate must possess at least a Bachelor's Degree, Computer Science/Information Technology, Engineering (Computer/Telecommunication), Engineering (Electrical/Electronic) or equivalent.
• 3+ years of working experience in the related field are required for this position
• Experience with penetration testing tools such as Burp Suite, Nmap, and Metasploit.
• Proficiency in scripting or programming languages such as Python, JavaScript, or Bash.
• Knowledge of web application security, networking, operating systems, databases, and cloud technologies.
• Familiarity with OWASP Top 10, common attack techniques, and security frameworks.
• Strong analytical, problem-solving, communication, and reporting skills.
• Proactive and able to work with minimum supervision to meet tight deadlines in a fast-paced environment;

Working Conditions and Arrangements:

• Candidates must have the necessary resources and equipment, both hardware (laptop) and required software.
• Candidates must have a fast, reliable, secure internet connection with a minimum speed of 10 Mbps.