Penetration Testing Analyst: Offensive Security Explorer

sunlife; Philippines; On-site; PHP 900,000 - 1,400,000; Full time

Job summary

Sun Life is seeking a skilled Penetration Testing Analyst to perform hands-on security testing of applications, infrastructure, and systems. This role centers on penetration testing delivery with secondary Red Team exposure to simulate attacks.

You will be part of a dynamic IT security team, performing tests across web, API and network surfaces, and delivering structured reports with practical remediation guidance.

Qualifications

• 2+ years of hands-on experience in web app security, API security, and basic network testing.
• Strong understanding of authentication, session management, and access control flaws.
• Experience with Burp Suite, Nmap, SQLmap or similar tools.
• Ability to perform manual testing beyond automated scanning.
• Strong documentation and reporting skills with clear risk articulation.

Responsibilities

• Perform web, API, mobile, and infrastructure penetration testing across enterprise applications.
• Identify, exploit, and validate vulnerabilities with manual testing techniques and tools.
• Produce clear reports with vulnerabilities, root cause, risk, and remediation recommendations.
• Support re-testing to validate remediation and assist Red Team activities when needed.
• Collaborate with seniors to understand attacker behavior and attack paths.

Skills

Web security tests

API security tests

Manual testing

Documentation/reporting

Education

Bachelor's degree in CS/Info Sec

Certifications (OSCP/CISSP) desired

Tools

Burp Suite

Nmap

SQLmap

Job description

Sun Life is seeking a skilled Penetration Testing Analyst to perform hands-on security testing of applications, infrastructure, and systems. This role centers on penetration testing delivery with secondary Red Team exposure to simulate attacks.

You will be part of a dynamic IT security team, performing tests across web, API and network surfaces, and delivering structured reports with practical remediation guidance.