Penetration Tester - Web, App & Cloud Security

SD Solutions I.T. Outsourcing, Inc.; Pasig; On-site; PHP 800,000 - 1,200,000; Full time

Job summary

SD Solutions I.T. Outsourcing, Inc. is seeking a Cybersecurity Penetration Tester to identify and exploit vulnerabilities in web apps, APIs, networks, and cloud environments. You will simulate real-world attacks, assess risks, and report remediation steps.

The ideal candidate has a minimum of 3 years in security testing, hands-on experience with Burp Suite, Nmap, Metasploit, and scripting (Python/JavaScript/Bash). Applicants should work with minimal supervision in a fast-paced setting.

Qualifications

• Bachelor's degree in Computer Science/IT or related field.
• At least 3 years of penetration testing experience.
• Experience with Burp Suite, Nmap, and Metasploit.
• Proficient in Python, JavaScript, or Bash.
• Knowledge of web security, networking, OS, databases, and cloud tech.
• Familiarity with OWASP Top 10 and security frameworks.
• Strong analytical, communication, and reporting skills.
• Able to work with minimal supervision to meet tight deadlines.

Responsibilities

• Perform penetration testing across applications, networks, and infrastructure.
• Identify vulnerabilities, misconfigurations, and attack vectors.
• Use manual and automated tools to simulate real-world attacks.
• Analyze findings and prioritize remediation with risk context.
• Prepare detailed reports with findings and recommendations.
• Collaborate with IT and development teams to remediate issues.
• Stay updated on threats, best practices, and ethical testing standards.
• Ensure testing complies with authorized scope.

Skills

Python

JavaScript

Bash

Analytical thinking

Communication skills

Education

Bachelor's Degree in Computer Science/IT or related

Tools

Burp Suite

Nmap

Metasploit

Job description

SD Solutions I.T. Outsourcing, Inc. is seeking a Cybersecurity Penetration Tester to identify and exploit vulnerabilities in web apps, APIs, networks, and cloud environments. You will simulate real-world attacks, assess risks, and report remediation steps.

The ideal candidate has a minimum of 3 years in security testing, hands-on experience with Burp Suite, Nmap, Metasploit, and scripting (Python/JavaScript/Bash). Applicants should work with minimal supervision in a fast-paced setting.