Cybersecurity VAPT Lead

Hammerjack Pty Ltd; Philippines; On-site; PHP 1,200,000 - 2,500,000; Full time

Job summary

SM Investments is seeking a Cyber Security Vulnerability professional to lead vulnerability management and remediation across the organization. You will drive assessments, automation, threat monitoring, and risk analysis to maintain a secure and compliant environment.

Key responsibilities include vulnerability scanning, onboarding, reporting, and remediation coordination, along with policy compliance and periodic security operations.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field.
• At least 5 years of relevant experience.
• Strong understanding of security principles, vulnerability management, and risk analysis.
• Familiarity with VA tools, threat intelligence, and automation.
• Security certifications (CISSP, CISM, CEH) are a plus.

Responsibilities

• Lead vulnerability scanning and onboarding across infrastructure and applications.
• Analyze results, prepare reports, and coordinate timely remediation.
• Conduct policy compliance scans and maintain updated security records.
• Identify opportunities to automate security processes and run feasibility studies.
• Track threat intel, perform risk assessments for new apps/architecture, and provide mitigations.
• Manage security policies, onboarding, firewall reviews, and password audits.

Skills

Vulnerability management

Threat analysis

Automation

Policy compliance

Communication

Education

Bachelor's degree (CS/Info Security)

Tools

Snyk

WAF

Job description

SM Investments | Pasay City | On-site

At SM Investments, we shape sustainable growth stories that uplift industries and communities. Join one of the Philippines leading conglomerates and help safeguard a dynamic ecosystem of retail, banking, and property businesses.

About the Role

We're looking for a highly motivated Cyber Security Vulnerability professional who will lead vulnerability management and remediation efforts across our organization. You will drive assessments, automation, threat monitoring, and risk analysis to ensure a secure and compliant environment.

What You’ll Do:

Vulnerability & Compliance Management

• Lead daily infrastructure and application vulnerability scanning and onboarding
• Analyze scan results, prepare reports, and coordinate timely remediation
• Conduct policy compliance scans and maintain updated security records

Automation & Feasibility

• Identify opportunities to automate security processes
• Develop and improve automation initiatives
• Perform feasibility studies for new security measures

Threat Monitoring & Risk Assessment

• Track daily threat intel, bulletins, and industry trends
• Handle risk assessments for new apps, architectures, and exemption requests (WAF, Snyk, whitelisting, etc.)
• Provide recommendations to mitigate identified risks

Periodic Security Operations

• Manage policy configuration, onboarding, firewall rule reviews, and password audits
• Coordinate remediation activities across teams

What We’re Looking For

• Bachelor's degree in Computer Science, Information Security, or related field
• At least 5 years of relevant experience
• Strong understanding of security principles, vulnerability management, and risk analysis
• Familiarity with VA tools, threat intelligence, and automation
• Excellent communication, analytical, and problem-solving skills
• Development experience is an advantage
• Security certifications (CISSP, CISM, CEH) are a plus

Why Join Us

Be part of a team that protects the digital backbone of one of the country's largest and most influential conglomerates. If you're passionate about security, continuous improvement, and high-impact work — we'd love to meet you.