IT Security Consultant

HRTX; Makati; On-site; PHP 600,000 - 800,000; Full time

Job summary

A technology security company located in Metro Manila is seeking a professional with experience in security testing. The ideal candidate should have strong communication skills, the ability to document findings, and perform Vulnerability Assessment and Penetration Testing. Relevant certifications like CompTIA Security + or EC Council CEH are preferred.

Qualifications

• 2-3 years experience in security testing.
• Strong knowledge in System & Network Infrastructure.
• Hands-on experience with security testing tools.

Responsibilities

• Uses manual testing techniques to understand applications better.
• Documents findings and presents to stakeholders.
• Performs Vulnerability Assessment and Penetration Testing.

Skills

Security Testing (VAPT)

Documenting Findings

Communication Skills

Knowledge of OWASP Top 10

Education

CompTIA Security +

EC Council CEH

ISMS Lead Auditor

Tools

Nessus

Burpsuite

Qualys

Job description

• Uses manual testing techniques and methods to gain a better understanding of the applications/mobile app environment and reduce false negatives
• SME in Infrastructure and/or Application Security and provides consultative recommendations in discussions related to Vulnerability Assessment and Penetration Testing
• Documents findings and recommendations, and present with stakeholders from technical team (Development, Infrastructure) and non-technical team (Operations, Management)
• Performs Vulnerability Assessment and Penetration Testing

Qualifications

• 2-3 years experience in security testing (VAPT, Source Code Review, Configuration Review, Architecture Review, Controls Review) (Preferred)
• Strong knowledge in System & Network Infrastructure, API and Mobile Application Development (Preferred)
• Experience of working on Unix, Windows & Linux platforms
• In-depth knowledge of OWASP Top 10 and CVEs, and the ability to effectively communicate methodologies and techniques with development teams and operations
• Hands-on experience with security testing tools such as Nessus, Burpsuite, Qualys and others
• Basic knowledge on information security standards and guidelines such ISO 27001/2, NIST, and CIS
• Understanding of Cloud Compute, Storage, Security and Virtualization best practice
• Has good communication skills to explain technical details with both technical team and non-technical team
• Has at least one of the following certifications:
• CompTIA Security +
• EC Council CEH or Mile2 CPEH
• ISMS Lead Auditor or ISACA CISA
• Other certifications with ISC2, CompTIA, EC Council, OSCP, CREST or SANS