Lead VAPT Engineer - Penetration Testing & Security Review

HRTX; Philippines; On-site; PHP 700,000 - 1,000,000; Full time

Job summary

HRTX is seeking a Security Vulnerability and Penetration Testing (VAPT) Engineer to oversee and perform penetration testing across firm systems, platforms, and applications. The role requires strong VAPT knowledge, tool proficiency, and clear communication to present risk-based recommendations.

The position emphasizes ownership of VAPT toolsets and the ability to translate technical findings into actionable security improvements within a risk management framework.

Qualifications

• Possess a Computer Science bachelors degree or substantially equivalent experience.
• CISSP required
• GIAC GPEN or GWAPT preferred
• Offensive Security OSCP required
• Commanding knowledge of VAPT concepts and best practices
• Extensive experience with automated VAPT tools (Nessus, AppScan, Burp Suite, Nipper, Trustwave)
• Expertise with attack tools and frameworks (Wireshark, Kali, Metasploit)
• Mobile platform security expertise and best practices
• Strong risk management alignment and ability to adapt to changing threats
• Excellent written and verbal English communication

Responsibilities

• Perform security penetration testing of the Firms systems, platforms, and applications
• Serve as a Subject Matter Expert (SME) for the VAPT function
• Manage system ownership for VAPT toolsets, platforms, and processes
• Produce technical assessment reports with practical, risk-based recommendations

Skills

VAPT concepts

Risk management

Strong written and oral communication

English proficiency

WhiteHat/ethical hacking

Education

Computer Science bachelors degree or substantially equivalent experience

Tools

Nessus

Burp Suite

AppScan

Nipper

Trustwave

Wireshark

Kali

Metasploit

Job description

HRTX is seeking a Security Vulnerability and Penetration Testing (VAPT) Engineer to oversee and perform penetration testing across firm systems, platforms, and applications. The role requires strong VAPT knowledge, tool proficiency, and clear communication to present risk-based recommendations.

The position emphasizes ownership of VAPT toolsets and the ability to translate technical findings into actionable security improvements within a risk management framework.