OSS Security Analyst - Vulnerabilities & Threat Modeling

Hammerjack Pty Ltd; Manila; On-site; PHP 1,200,000 - 2,100,000; Full time

Job summary

Hammerjack Pty Ltd in Manila is seeking an experienced security professional to lead vulnerability analysis and OSS security assessment across projects.

You will investigate findings, validate exploitability, model threats, and contribute to AI dataset improvements while collaborating with engineering teams. Requires 5+ years of hands-on security experience and strong coding skills in C/C++, Go, Java, Python.

Qualifications

• 5+ years of hands-on experience in Application Security, Vulnerability Research, Penetration Testing, Product Security, or Secure Software Engineering.
• Proven experience in Open Source Software (OSS) Security Assessment and Vulnerability Analysis.
• Strong code review and debugging capabilities.

Responsibilities

• Analyze and investigate security findings generated by automated vulnerability scanners.
• Differentiate genuine vulnerabilities from false positives, informational findings, and AI-generated hallucinations.
• Perform root cause analysis of identified vulnerabilities.
• Validate exploitability and business impact of reported issues.
• Develop project-level threat models for OSS repositories.

Skills

C/C++

Go

Java

Python

Bash

Job description

Hammerjack Pty Ltd in Manila is seeking an experienced security professional to lead vulnerability analysis and OSS security assessment across projects.

You will investigate findings, validate exploitability, model threats, and contribute to AI dataset improvements while collaborating with engineering teams. Requires 5+ years of hands-on security experience and strong coding skills in C/C++, Go, Java, Python.