Lead Security Penetration Testing Engineer

HRTX; Philippines; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

HRTX seeks a Security Vulnerability and Penetration Testing Engineer to lead penetration testing across systems, platforms and applications. You will act as a SME for the VAPT function, own common toolsets and deliver technical assessments with actionable risk-based recommendations.

The ideal candidate holds an CS degree, OSCP and CISSP, with practical NSESSUS/Nessus, Burp Suite, Metasploit, and mobile security expertise to advance our security posture and regulatory compliance.

Qualifications

• A Computer Science bachelors degree or substantially equivalent experience.
• CISSP is required.
• GIAC GPEN or GWAPT is preferred.
• Offensive Security OSCP is required.
• Commanding knowledge of VAPT concepts and best practices, including the requirements for WhiteHat/ethical hacking.
• Expert understanding of the difference between a vulnerability assessment and a penetration test in context of scope/objectives/deliverables.
• Extensive experience with Nessus, Appscan, Burp Suite, Nipper, and Trustwave.
• Expert in attack tools/frameworks such as Wireshark, Kali, Metasploit.
• Expert in mobile platform security tools and best practices.
• Understand VAPT in risk management and organizational priorities.
• Able to communicate with non-technical audiences effectively.

Responsibilities

• Perform security penetration testing of the Firms systems, platforms, and applications
• Serve as a Subject Matter Expert (SME) for the VAPT function
• Serve as the system owner for common VAPT toolsets, platforms, and processes
• Provide technical assessment reports that are understandable and include practical recommendations based on risk principles

Skills

VAPT expertise

Nessus

Burp Suite

Wireshark

Metasploit

Kali Linux

OWASP

Scripting

Report writing

English proficiency

Education

Bachelor's degree in Computer Science

CISSP certification

OSCP certification

GIAC GPEN/GWAPT preferred

Tools

Nessus

AppScan

Burp Suite

Nipper

Trustwave

Job description

HRTX seeks a Security Vulnerability and Penetration Testing Engineer to lead penetration testing across systems, platforms and applications. You will act as a SME for the VAPT function, own common toolsets and deliver technical assessments with actionable risk-based recommendations.

The ideal candidate holds an CS degree, OSCP and CISSP, with practical NSESSUS/Nessus, Burp Suite, Metasploit, and mobile security expertise to advance our security posture and regulatory compliance.