Hybrid Penetration Tester: Web Security Specialist

weSource Management Consultancy Firm; Taguig; Hybrid; PHP 892,800 - 1,116,000; Full time

Job summary

A management consultancy firm in Taguig is looking for a Penetration Tester to assess web applications and infrastructure, identifying vulnerabilities and providing solutions. The successful candidate will have a strong understanding of security methodologies and will work closely with a multidisciplinary team in a hybrid environment. Key competencies include vulnerability assessments, penetration testing, and familiarity with industry certifications such as CEH or OSCP. This role offers competitive compensation potentially up to 100K.

Qualifications

• In-depth knowledge of web application vulnerabilities and mitigation strategies.
• Working knowledge of on-prem and cloud builds (IaaS, PaaS, SaaS).
• Proficiency in various penetration testing methodologies and tools.
• Strong problem-solving skills to understand attack vectors.

Responsibilities

• Conduct comprehensive assessments of web applications and infrastructure.
• Perform controlled attacks on web applications and APIs.
• Analyze results of penetration tests to assess vulnerabilities.
• Prepare detailed reports documenting findings and recommendations.
• Collaborate with developers for fixing identified vulnerabilities.
• Stay updated on latest vulnerabilities and attack techniques.
• Conduct testing within a legal and ethical framework.
• Engage in professional development activities to enhance skills.

Skills

Web Application Security

Infrastructure security

Penetration Testing Techniques

Analytical and Problem-Solving Skills

Education

Bachelor's degree in computer science, information security, or cybersecurity

Tools

OWASP Top 10 vulnerability knowledge

Automated vulnerability scanners

Exploit frameworks

Job description

A management consultancy firm in Taguig is looking for a Penetration Tester to assess web applications and infrastructure, identifying vulnerabilities and providing solutions. The successful candidate will have a strong understanding of security methodologies and will work closely with a multidisciplinary team in a hybrid environment. Key competencies include vulnerability assessments, penetration testing, and familiarity with industry certifications such as CEH or OSCP. This role offers competitive compensation potentially up to 100K.