Penetration Tester

Orro Group; Makati; On-site; PHP 1,000,000 - 2,000,000; Full time

Benefits offered by this job

HMO with dependent cover

extra vacation leave

inclusive public holiday swaps

extended maternity leave

flexible work options

leadership and development programs

extra allowances

employee discounts

a wellbeing platform full of fitness,

Job summary

Orro Philippines is hiring a dedicated Penetration Tester for a major financial services client. In a brand-new role within our Manila Cyber Security team, you’ll own an ongoing testing program and run an AI-powered continuous testing platform, deep-diving to find vulnerabilities and drive remediation with stakeholders.

You'll perform testing across networks, applications, and infrastructure, including web, mobile, and internal environments, with on-site collaboration and regular reporting to

Qualifications

• 3 or more years of hands on penetration testing, including web applications and internal networks such as Active Directory
• Confidence with tools such as Burp Suite, Nmap and Metasploit, plus scripting in Python, PowerShell or Bash
• A solid understanding of common vulnerabilities and testing methodologies such as the OWASP Top 10
• OSCP, CREST CRT or an equivalent certification
• Strong written and spoken English, with the confidence to communicate directly with an Australian client

Responsibilities

• Own the full program of business as usual penetration tests for a dedicated financial services customer
• Configure and maintain the AI powered continuous penetration testing platform, using it to support your testing
• Test across web, mobile, thick client and wireless environments
• Carry out red teaming, code reviews and vulnerability assessments
• Advise on security issues and remediation, embedding security assurance into projects and operations
• Deliver clear, actionable reports for technical and non technical stakeholders

Skills

Penetration testing

Web applications

Active Directory

Burp Suite

Nmap

Metasploit

Python

PowerShell

Bash

OWASP Top 10

English communication

Education

OSCP

CREST CRT

Tools

Burp Suite

Nmap

Metasploit

Job description

Join Orro, one of Australia’s leading managed security providers, as a dedicated Penetration Tester for a major financial services client. This is a brand new role in our Manila Cyber Security team, in a highly regulated environment where the quality of your work really matters.

You’ll own an ongoing testing program and run our AI powered continuous testing platform, pairing hands‑on offensive security with modern tooling. Instead of jumping from one engagement to the next, you’ll go deep: find the vulnerabilities, work with stakeholders to fix them, and see your findings through to resolution.

About Orro

We're an Australian success story, now close to 500 people strong, delivering secure, end to end digital solutions across cloud, collaboration, cyber security, data services and network infrastructure, all backed by over 20 years of experience. Trusted by some of Australia's biggest brands, Orro leads the way in designing, building and operating digital infrastructure that delivers greater efficiency, agility, performance and resilience. Our solutions take the stress out of tech for more than 400 businesses and over 20 million Australians every single day.

Our mission? To create "future now" solutions making it faster, simpler and safer for people to access, store and share information, wherever they are and whoever they're with. But more than that, we know that real impact comes from connecting people, not just machines. That's why we take the time to understand our clients; how they work, what matters to them, and where they're headed so we can deliver not just what they need today, but what they'll need next.

With offices in Sydney, Melbourne, Canberra, Brisbane and Perth, and teams across New Zealand, the Philippines and the UK, Orro is known for delivering future ready solutions, backed by deep expertise, genuine human insight and lasting partnerships.

What You'll Be Doing

As the dedicated security testing partner for one of our financial services customers, you'll run their full program of business as usual penetration testing across networks, applications and infrastructure. Alongside your hands on testing, you'll configure and maintain an AI powered continuous penetration testing platform and use it as a tool to support your work. You'll work closely with our Cyber Consulting and Managed Services teams to turn findings into clear, practical remediation advice. Some on site work with the customer will be required.

• Own the full program of business as usual penetration tests for a dedicated financial services customer
• Configure and maintain the AI powered continuous penetration testing platform, using it to support your testing
• Test across web, mobile, thick client and wireless environments
• Carry out red teaming, code reviews and vulnerability assessments
• Advise on security issues and remediation, embedding security assurance into projects and operations
• Deliver clear, actionable reports for technical and non technical stakeholders

What You'll Bring

The Essentials

• 3 or more years of hands on penetration testing, including web applications and internal networks such as Active Directory
• Confidence with tools such as Burp Suite, Nmap and Metasploit, plus scripting in Python, PowerShell or Bash
• A solid understanding of common vulnerabilities and testing methodologies such as the OWASP Top 10
• OSCP, CREST CRT or an equivalent certification
• Strong written and spoken English, with the confidence to communicate directly with an Australian client

Bonus Points

• Experience in red teaming, mobile or wireless testing, or thick client assessments
• A background in system administration, networking or web development
• CTF, bug bounty or open source security contributions

Even if you don't tick every box, don't let that hold you back. If this sounds like your kind of challenge, we'd genuinely love to hear from you.

Why Orro Philippines?

We're proud of our growing presence in the Philippines: over 150 team members and a central Manila office. We support our people, and those who matter most to them, with meaningful, inclusive benefits built for every stage of life, including HMO with dependent cover, extra vacation leave, inclusive public holiday swaps, extended maternity leave, and flexible work options.

• HMO with dependent cover
• extra vacation leave
• inclusive public holiday swaps
• extended maternity leave
• flexible work options

We also invest in your growth and wellbeing through leadership and development programs, extra allowances, employee discounts, and a wellbeing platform full of fitness, nutrition, and mental wellness resources.

• leadership and development programs
• extra allowances
• employee discounts
• a wellbeing platform full of fitness, nutrition, and mental wellness resources

Beyond the benefits, life at Orro Manila is good fun. Our teams come together year round for events like our Mini Sportsfest, and giving back matters too, with regular community outreach and charity drives you can join on work time through paid volunteer leave. It's how we stay connected, look after one another, and make an impact as one team.

Note: The role is subject to state and federal police background checks.