Junior VAPT Specialist

Lennor Group; Pasig; On-site; PHP 446,000 - 670,000; Full time

Job summary

Lennor Group, a proud Filipino company, seeks a Junior VAPT Specialist for onsite work in Ortigas. You will conduct vulnerability assessments and penetration testing across diverse tech environments, document findings, and present actionable remediation plans to stakeholders.

Collaboration with cybersecurity teams is essential to support vulnerability management. Qualifications include a 1-year VAPT or security research background and familiarity with OWASP Top 10, Kali, Metasploit, Burp Suite

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or another four-year related course.
• At least 1 year of hands-on experience in web and/or mobile application VAPT, penetration testing, or security research.
• Strong understanding of the OWASP Top 10 and its application in web application security testing.
• Knowledge of ICS/OT, DevOps or related technologies is highly preferred.
• Hands-on experience with security testing tools such as Kali Linux, Metasploit, Qualys, Nessus, Burp Suite, OWASP ZAP.

Responsibilities

• Generate, document, and submit VAPT reports, periodic reports, and other relevant documents.
• Present the report findings to stakeholders in a clear and concise manner.
• Provide support to other Cybersecurity and non-Cybersecurity groups in relation to vulnerability assessment and testing.
• Perform validation and tracking until closure of vulnerabilities identified from different Threat Intelligence resources.
• Involvement with Threat Exposure and Attack Surface Management Team’s project initiatives.

Job description

Job Description

About Lennor Group

As a proud Filipino company, we are committed to providing world-class business and workforce solutions. Our deep market expertise, combined with a global perspective, empowers us to serve businesses of all sizes and industries efficiently.

Our brand, Lennor Metier, is a leading recruitment agency and headhunting firm in the Philippines, partnering with reputable companies to source top talent for direct-hire opportunities. It specializes in IT, Finance, Engineering, Sales & Marketing, Supply Chain, HR, and Executive Search.

Job Title

Junior VAPT Specialist

Industry

BPO

Salary Range

up to ₱60,000

Work Setup

Onsite

Shift Schedule

Day Shift

Location

Ortigas

About The Role

The Junior VAPT Specialist is responsible for conducting comprehensive vulnerability assessments and penetration testing across various technology environments. The role will identify security weaknesses, validate vulnerabilities, provide actionable remediation recommendations, and support cybersecurity initiatives across the organization.

Key Responsibilities

• Generate, document, and submit VAPT reports, periodic reports, and other relevant documents
• Present the report findings to stakeholders in a clear and concise manner
• Provide support to other Cybersecurity and non-Cybersecurity groups in relation to vulnerability assessment and testing
• Perform validation and tracking until closure of vulnerabilities identified from different Threat Intelligence resources, monitor CVE, conduct zero-day analysis and cloud security
• Involvement with Threat Exposure and Attack Surface Management Team’s project initiatives.

Required Qualifications

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or another four-year related course.
• At least 1 year of hands-on experience in web and/or mobile application VAPT, penetration testing, or security research.
• Strong understanding of the OWASP Top 10 and its application in web application security testing.
• Knowledge of Industrial Control Systems (ICS), Operational Technology (OT), DevOps, or related technologies is highly preferred.
• Hands-on experience with open-source and commercial security testing tools such as:
• Kali Linux
• Metasploit
• Qualys
• Nessus
• Burp Suite
• OWASP ZAP
• Other vulnerability assessment and penetration testing tools

Good To Have Qualifications

• Working knowledge of web and mobile application development and common application architectures.
• Ability to analyze technical vulnerabilities, assess their potential business impact, and recommend appropriate remediation measures.
• Strong technical documentation and report-writing skills, with the ability to communicate security findings clearly to both technical and non-technical audiences.
• Strong analytical, problem-solving, and communication skills.
• Cybersecurity certifications such as CEH, CISSP, or other relevant industry certifications are preferred.