Hybrid Penetration Tester — Web, App & Network Security

Manulife; Manila; Hybrid; PHP 600,000 - 900,000; Full time

Job summary

Manulife's Global Cybersecurity Services - Application Security is building a penetration testing COE to deliver testing capabilities for all segments. As a Penetration Tester, you will work with the business team and second line of defense to assess scope and effort based on risk and execute engagements following industry frameworks.

Designation to be finalized after recruitment processes. Hybrid work arrangement in the Philippines and a focus on hands-on testing across web, mobile and network

Qualifications

• Hands-on penetration testing experience on external/internal networks and applications.
• Knowledge of current vulnerabilities, exploits and tools (VAPT, DAST, SAST).
• Willingness to work mid-shift and night-shift in hybrid setup (Quezon City, Philippines).

Responsibilities

• Evaluate security posture across web apps, microservices, mobile apps, and networks.
• Develop and communicate the potential impacts of cyber attacks to stakeholders.
• Recommend security controls and remediation for identified issues.
• Perform comprehensive network scans and vulnerability assessments.
• Write detailed reports with risk analyses and remediation guidance.

Skills

Penetration testing

VAPT (DAST/SAST)

Network security

Web & mobile apps testing

Threat assessment

Education

Bachelor's degree in CS/IT/Cybersecurity

Security certification (preferred: OSCP/OSCE/CEH/GPEN)

Tools

OSCP

OSCE

CEH

GWAPT

GPEN

eWPT

Job description

Manulife's Global Cybersecurity Services - Application Security is building a penetration testing COE to deliver testing capabilities for all segments. As a Penetration Tester, you will work with the business team and second line of defense to assess scope and effort based on risk and execute engagements following industry frameworks.

Designation to be finalized after recruitment processes. Hybrid work arrangement in the Philippines and a focus on hands-on testing across web, mobile and network