Penetration Tester - Remote-First Cloud & App Security

Workstreet; Manila; On-site; PHP 4,305,000 - 6,765,000; Full time

Benefits offered by this job

Remote-first culture

Mentorship and training opportunities

Training reimbursements

Job summary

Workstreet is seeking a Penetration Tester to join our cybersecurity team. You will assess applications, networks, and systems through structured penetration testing and vulnerability assessments, documenting findings and providing actionable recommendations to strengthen client defenses.

You will work closely with client engineering teams, engineering custom testing scripts, and deliver clear, business-friendly milestones while supporting incident response and threat containment as needed.

Qualifications

• Structured penetration testing across applications, networks, and systems.
• Ability to translate risk into actionable remediation roadmaps.
• Experience documenting findings with high-fidelity reports.

Responsibilities

• Execute penetration tests across web, mobile, network, and systems.
• Produce technical reports mapping exploit impact and remediation steps.
• Guide client engineering teams to implement fixes and verify improvements.
• Engineer custom testing scripts and automation tools for broader coverage.
• Conduct social engineering simulations to audit human security awareness.
• Support incident response with offensive security expertise.
• Maintain clear client communications and project milestones.
• Integrate evolving threat techniques into live playbooks.

Skills

Offensive security

Threat validation

Exploitation architectures

Technical reporting

Education

Security certifications

Tools

Testing platforms

Job description

Workstreet is seeking a Penetration Tester to join our cybersecurity team. You will assess applications, networks, and systems through structured penetration testing and vulnerability assessments, documenting findings and providing actionable recommendations to strengthen client defenses.

You will work closely with client engineering teams, engineering custom testing scripts, and deliver clear, business-friendly milestones while supporting incident response and threat containment as needed.