Onsite VAPT Specialist - Web & Mobile Security Tester

Hammerjack Pty Ltd; Metro Manila; On-site; PHP 500,000 - 750,000; Full time

Job summary

Hammerjack Pty Ltd in Ortigas, Manila, is seeking a Vulnerability Assessment and Penetration Testing professional for 100% onsite work. The role focuses on VAPT across host/server/workstation, network devices, web apps, APIs, source code, mobile apps, cloud security, and more.

You will document findings, present reports to stakeholders, and coordinate remediation with cross-functional teams, while staying current with threat intelligence and OWASP Top 10 guidance.

Qualifications

• Bachelor's degree in IT or related 4-year course.
• Minimum 1 year of experience in web and mobile application VAPT, security research, or purple teaming.
• Experience with open source and commercial security testing tools like Kali Linux, Metasploit, Qualys, Nessus, BurpSuite, OWASP ZAP, etc.
• Ability to write assessment reports understandable by both technical and non-technical audiences.
• Preferably with certifications like CEH, CISSP, etc.

Responsibilities

• Conducts VAPT across host/server/workstation, network devices, web applications, web APIs, source code, mobile apps, cloud security, and related security tools.
• Documentation and submission of VAPT reports and periodic documents; present findings to stakeholders clearly.
• Provide support to cybersecurity and non-cybersecurity groups related to vulnerability assessment and testing.
• Perform validation and tracking until closure of vulnerabilities; monitor CVE and zero-day analysis; support Threat Exposure and Attack Surface Management initiatives.

Skills

VAPT experience

OWASP Top 10

Report writing

Technical communication

Education

Bachelor's degree in IT or related field

Tools

Kali Linux

Metasploit

Qualys

Nessus

BurpSuite

OWASP ZAP

Job description

Hammerjack Pty Ltd in Ortigas, Manila, is seeking a Vulnerability Assessment and Penetration Testing professional for 100% onsite work. The role focuses on VAPT across host/server/workstation, network devices, web apps, APIs, source code, mobile apps, cloud security, and more.

You will document findings, present reports to stakeholders, and coordinate remediation with cross-functional teams, while staying current with threat intelligence and OWASP Top 10 guidance.