Lead VAPT Engineer: Offensive Security & Risk Assessments

Baker McKenzie; Manila; Hybrid; PHP 900,000 - 1,500,000; Full time

Job summary

Baker McKenzie is seeking a Security Vulnerability and Penetration Testing (VAPT) Engineer to lead penetration testing across firm systems and apps. You will manage VAPT tools, deliver technical assessment reports, and provide practical, risk-based recommendations to enhance security posture.

The role requires deep VAPT expertise, strong English communication, and the ability to translate complex findings for non-technical audiences. Hybrid arrangement in Manila area is expected.

Qualifications

• Knowledge of VAPT concepts and ethical hacking standards.
• Differentiate vulnerability assessment vs penetration testing deliverables.
• Hands-on with common VAPT tools (Nessus, AppScan, Burp Suite).
• Experience with attack tools/frameworks (Wireshark, Kali, Metasploit).
• Mobile security testing knowledge and best practices.
• Ability to validate vulnerabilities accurately.
• Understanding of OWASP, CVE, security controls, exploits.
• Programming/scripting knowledge advantageous.
• Experience with API testing methods is desirable.
• Experience applying AI to security testing of AI-enabled apps.

Responsibilities

• Lead security pen-testing across firm systems and apps.
• Own and manage core VAPT tools, platforms, and processes.
• Deliver clear assessment reports with actionable recommendations.
• Convey complex concepts to non-technical stakeholders.

Skills

VAPT concepts

WhiteHat/ethical hacking

Vulnerability assessment vs. pen test

Nessus

AppScan

Burp Suite

Nipper

Trustwave

Wireshark

Kali

Metasploit

Mobile platform security

OWASP

CVE knowledge

Scripting languages

API testing

AI in security testing

Education

Computer Science Bachelor's Degree

CISSP certification

GIAC GPEN/GAIPT/GWAPT (preferred)

Offensive Security OSCP

Tools

Nessus

AppScan

Burp Suite

Nipper

Trustwave

Wireshark

Kali

Metasploit

Job description

Baker McKenzie is seeking a Security Vulnerability and Penetration Testing (VAPT) Engineer to lead penetration testing across firm systems and apps. You will manage VAPT tools, deliver technical assessment reports, and provide practical, risk-based recommendations to enhance security posture.

The role requires deep VAPT expertise, strong English communication, and the ability to translate complex findings for non-technical audiences. Hybrid arrangement in Manila area is expected.