Penetration Tester (SMB)

BreachLock Inc.; Hinoba-an; On-site; PHP 800,000 - 1,200,000; Full time

Benefits offered by this job

Private Health Insurance

Job summary

BreachLock Inc. in the Philippines is seeking a skilled Penetration Tester to assess client infrastructure, web and mobile apps, and security controls.

You will simulate adversaries, document findings for technical and executive audiences, and help develop offensive capabilities. The role requires a degree in IT or cybersecurity, 3+ years in pentesting or red team, proficiency with Kali Linux, Burp, Metasploit, and scripting in Python or .NET.

Qualifications

• Degree in Information Technology, Information Systems Security, Cybersecurity, or related work experience.
• 3+ years of experience in Penetration Testing and/or Red Teaming.
• Experience with penetration testing like Web Applications, Infrastructure, mobile applications, and Vulnerability Assessments.
• Expertise using Kali Linux and tools like Burp, Metasploit, and other security tools.
• Programming experience in Python, .NET, or other interpreted or compiled languages.

Responsibilities

• Understand complex computer systems and technical cybersecurity environments for penetration testing.
• Work on projects focused on identifying security vulnerabilities in client’s infrastructure, Web and Mobile Apps, etc.
• Apply an adversary mindset to simulate sophisticated actors and achieve project-specific objectives
• Document and effectively communicate findings and vulnerabilities at both technical and executive management levels
• Assist in the development of offensive capabilities
• Develop internal tools and automation to assist in the execution of penetration tests
• Perform research and develop your own tools or scripts, to identify new vulnerabilities
• Understand and present recommendations to reduce the risk for complex scenarios, wherein Security vulnerabilities cannot be remediated.

Skills

Penetration testing

Red Teaming

Web applications

Mobile applications

Vulnerability assessments

Python

Teamwork

Communication

Education

Bachelor's degree in Information Technology, Information Systems Security, Cybersecurity

Tools

Kali Linux

Burp Suite

Metasploit

Job description

• Understand complex computer systems and technical cybersecurity environments for penetration testing.
• Work on projects focused on identifying security vulnerabilities in client’s infrastructure, Web and Mobile Apps, etc.
• Apply an adversary mindset to simulate sophisticated actors and achieve project-specific objectives
• Document and effectively communicate findings and vulnerabilities at both technical and executive management levels
• Assist in the development of offensive capabilities
• Develop internal tools and automation to assist in the execution of penetration tests
• Perform research and develop your own tools or scripts, to identify new vulnerabilities
• Understand and present recommendations to reduce the risk for complex scenarios, wherein Security vulnerabilities cannot be remediated.

• Degree in Information Technology, Information Systems Security, Cybersecurity, or related work experience
• 3+ years of experience in Penetration Testing and/or Red Teaming;
• Experience with penetration testing like Web Applications, Infrastructure, mobile applications, and Vulnerability Assessments;
• Expertise using Kali Linux and tools like Burp, Metasploit, and other security tools;
• Experience in effectively prioritising workload to meet deadlines with quality deliverables;
• Hardworking, committed to teamwork, and able to build strong interpersonal relationships;
• Strong communication skills and should be able to articulate ideas and scenarios Internally and with Clients effectively.
• Ability to maintain professionalism and always strive for high ethical professional standards.
• Willingness to research new security testing techniques and build automation to bring in efficiency;
• Preferred professional qualifications: OSCP, OSCP+, CRTP
• Programming experience in Python, .NET, or other interpreted or compiled languages

• Private Health Insurance