Cybersecurity – Senior Penetration Tester

Radii Global; Philippines; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

Radii Global is seeking a Senior Penetration Tester focused on Application Security. You will perform testing across web, mobile, and thick-client apps, with web testing as the main workload and mobile testing making up about 20% of the work. Knowledge of OWASP, Kali Linux, and Burp Suite is essential.

The role requires at least 6+ years of hands-on pentesting experience and an OSCP or CREST certification. Independent work style and ability to follow established frameworks are important.

Qualifications

• 6+ years of hands-on penetration testing experience.
• Solid experience in Web Application Security Testing.
• Experience in Mobile Application Security Testing (≈20% workload).
• Experience with Android/iOS testing and API Security testing (preferred).

Responsibilities

• Conduct application security penetration testing across web, mobile, and thick-client applications.
• Perform Web Application Security Testing as the primary workload.
• Conduct Mobile Application Penetration Testing (~20% of workload).
• Perform Thick Client Security Testing; training possible for strong candidates.
• Identify, validate, and exploit vulnerabilities within defined scope.
• Document findings with evidence, risk, impact, and remediation guidance.
• Prepare detailed reports for technical and business stakeholders.
• Retest vulnerabilities after remediation.

Skills

Penetration testing

Web application security

Mobile application security

OWASP knowledge

Report writing

Education

OSCP or CREST certification

Tools

Kali Linux

Burp Suite

Job description

Cybersecurity – Senior Penetration Tester

Senior Penetration Tester – Application Security. The role is focused specifically on Application Security Penetration Testing at the application layer. You will conduct penetration testing across web, mobile, and thick-client applications, with Web Application Security Testing comprising the majority of the workload, Mobile Application Penetration Testing expected to account for approximately 20% of the workload, and Thick Client Security Testing also included.

Key responsibilities

Conduct application security penetration testing across web, mobile, and thick-client applications

Perform Web Application Security Testing, which will comprise the majority of the workload

Conduct Mobile Application Penetration Testing, expected to account for approximately 20% of the workload

Perform Thick Client Security Testing; prior experience is preferred but candidates with strong application security experience can be trained

Identify, validate, and exploit security vulnerabilities within the agreed testing scope

Execute penetration testing activities using established methodologies, test plans, frameworks, and processes

Follow defined Rules of Engagement (RoE) and ensure testing is performed within the approved application-layer scope

Document vulnerabilities with appropriate evidence, risk ratings, business impact, and remediation recommendations

Prepare clear and detailed penetration testing reports for technical and business stakeholders

Perform vulnerability retesting to validate remediation

About you

Minimum 6+ years of hands-on penetration testing experience

Strong experience in Web Application Security Testing

Experience in Mobile Application Security Testing — approximately 20% of workload

OSCP or CREST certification is mandatory

Hands-on experience with Kali Linux and Burp Suite

Strong understanding of OWASP application security principles and common web vulnerabilities

Strong vulnerability identification, validation, exploitation, and reporting skills

Ability to work independently and execute against existing penetration testing frameworks and methodologies

Experience with Android/iOS penetration testing (preferred)

Experience with API Security Testing (preferred)