Managing Consultant - Penetration Testing

THEOS; Philippines; Hybrid; PHP 1,200,000 - 1,800,000; Full time

Benefits offered by this job

International working environment

Hybrid work arrangement (90% Remote)

Training and certification allowance

Comprehensive medical benefits for you

Job summary

Theos is seeking a Managing Consultant to lead our Penetration Testing practice across Asia. You will mentor a highly technical team, stay hands-on when needed, and collaborate with the Offense Director, Customer Success, and clients to deliver high-quality security engagements.

This leadership role focuses on managing delivery, developing the practice, and guiding senior consultants, while maintaining strong client relationships and contributing to security thought leadership.

Qualifications

• At least five years of information security experience with a focus on penetration testing in a consulting environment.
• One to three years in people management, delivery management, or overseeing technical operations and project delivery.
• Strong knowledge of vulnerability assessment and penetration testing methodologies.
• Ability to lead highly technical professionals across Asia.
• Ability to explain complex findings to non-technical audiences.
• Strong consulting, client communication, and stakeholder-management skills.
• Experience working with project managers, developers, and executives.
• OSCP, CREST, GPEN, OSWE, GWAPT, CISSP or comparable certifications preferred.

Responsibilities

• Lead and manage a team of penetration testers and security consultants delivering engagements.
• Oversee project delivery and ensure on-time completion within SLAs.
• Perform vulnerability assessments and penetration tests when needed.
• Review and quality-check technical reports and client deliverables.
• Communicate findings, business impact, and remediation to stakeholders.
• Manage client calls, concerns, and escalations with leadership.
• Support the development of the Penetration Testing practice and service portfolio.
• Assist with pre-sales activities, including client presentations and proposals.
• Research emerging threats and industry developments.
• Lead internal initiatives to improve processes and capabilities.
• Provide security training and advisories to clients and team members.

Skills

Penetration testing leadership

Vulnerability assessment

Lead technical team

Client communication

Stakeholder management

Report reviews

Pre-sales support

Mentoring

Threat research

Job description

About the Role

Theos is looking for a Managing Consultant to join our team of security professionals.

This is a leadership role responsible for managing our Penetration Testing team, developing the practice, and ensuring the successful delivery of high-quality security engagements to enterprise clients across Asia.

You will lead and mentor a highly technical team while remaining hands-on when operational support, technical review, or quality assurance is needed. You will also work closely with clients, the Offense Director, Customer Success, and other internal stakeholders.

What You’ll Do

• Lead and manage a team of penetration testers and security consultants delivering Vulnerability Assessment and Penetration Testing engagements.
• Oversee project delivery and ensure engagements are completed with excellent quality and within agreed timelines and service-level commitments.
• Perform vulnerability assessments and penetration tests when operational support is needed.
• Review and quality-check technical reports and client deliverables.
• Communicate technical findings, business impact, and remediation recommendations clearly to technical and non-technical stakeholders.
• Manage client calls, concerns, and escalations in coordination with the Offense Director and Customer Success team.
• Support the development of the Penetration Testing practice, capabilities, service portfolio, and internal processes.
• Assist with pre-sales activities, including client presentations, solution design, scoping, and proposal preparation.
• Research emerging threats, attack techniques, security tools, and industry developments.
• Lead internal initiatives aimed at improving the team’s processes, technical capabilities, and service delivery.
• Provide security training and advisories to clients and members of the team.
• Mentor team members and support their technical and professional development.
• Contribute to the security community through tools, presentations, white papers, technical articles, and similar initiatives.

What We’re Looking For

• At least five years of information security experience, with a significant focus on penetration testing in a consulting environment.
• One to three years of experience in people management, delivery management, or overseeing technical operations and project delivery.
• Strong technical knowledge of vulnerability assessment and penetration testing methodologies.
• Demonstrated ability and genuine interest in leading highly technical professionals from different locations across Asia.
• Ability to explain complex technical findings and security risks clearly to non-technical audiences.
• Strong consulting, client communication, and stakeholder-management skills.
• Ability to manage conflicts, client concerns, and escalations professionally.
• Experience working with project managers, developers, technical teams, application owners, and executives.
• OSCP, CREST, GPEN, OSWE, GWAPT, CISSP, or comparable certifications are highly preferred.
• A genuine passion for cybersecurity and the security community.

What’s in It for You

• International working environment
• Hybrid work arrangement (90% Remote, occasional on site for meetings)
• Flexible working hours
• Comprehensive medical benefits for you and one dependent
• Training and certification allowance
• Regular company events

A Note About Your Application

Please answer the screening questions carefully, as your responses will form an important part of our initial assessment.

You must also indicate your desired compensation. Applications without a stated desired compensation may not be processed.