Hybrid Penetration Tester for Finance

Orro Pty Ltd; Manila; Hybrid; PHP 900,000 - 1,500,000; Full time

Benefits offered by this job

HMO with dependent cover

Extra vacation leave

Inclusive public holiday swaps

Extended maternity leave

Flexible work options

Wellbeing platform and leadership/dev‑

Paid volunteer leave

Job summary

Orro Philippines is hiring a dedicated Penetration Tester to lead a full testing program for a major financial services client. The role combines hands-on testing with an AI-powered continuous platform in a Manila hybrid setting, and involves close collaboration with Cyber Consulting and Managed Services teams.

You’ll perform deep vulnerability assessments, advise on remediation, and produce clear reports for both technical and non-technical stakeholders.

Qualifications

• 3+ years of hands-on penetration testing, including web apps and internal networks such as AD.
• Confidence with Burp Suite, Nmap and Metasploit, plus scripting in Python, PowerShell or Bash.
• Solid understanding of OWASP Top 10 and common vulnerability testing methodologies.
• OSCP, CREST CRT or equivalent certification.
• Strong written and spoken English, able to communicate with an Australian client.

Responsibilities

• Own the full program of BAU penetration tests for a dedicated financial services customer.
• Configure and maintain the AI-powered continuous penetration testing platform.
• Test across web, mobile, thick client, and wireless environments.
• Carry out red teaming, code reviews and vulnerability assessments.
• Advise on security issues and remediation, embedding security into projects and operations.
• Deliver clear, actionable reports for technical and non-technical stakeholders.

Skills

Hands-on penetration testing

Strong English communication

Education

OSCP/CREST CRT equivalent

Tools

Burp Suite

Nmap

Metasploit

Python

PowerShell

Bash

Job description

Orro Philippines is hiring a dedicated Penetration Tester to lead a full testing program for a major financial services client. The role combines hands-on testing with an AI-powered continuous platform in a Manila hybrid setting, and involves close collaboration with Cyber Consulting and Managed Services teams.

You’ll perform deep vulnerability assessments, advise on remediation, and produce clear reports for both technical and non-technical stakeholders.