Penetration Testing Analyst | Offensive Security & Red Team

Sun Life; Manila; On-site; PHP 700,000 - 1,000,000; Full time

Benefits offered by this job

Annual leave 22-25 days

Maternity leave

Paternity leave

Fitness reimbursement

Annual bonus

Private health insurance

Study assistance

Wellness programme

Pension scheme

Professional development training

Job summary

Sun Life Philippines is seeking a Penetration Testing Analyst to perform hands-on security testing of applications, infrastructure, and systems across our enterprise ecosystem. The role emphasizes penetration testing delivery with exposure to red team activities.

The successful candidate will have strong technical testing skills, experience with Burp Suite, Nmap or similar tools, and a drive to expand offensive security capabilities within a collaborative, growth-focused environment.

Qualifications

• Hands-on penetration testing across web, API, mobile and infrastructure assets.
• Experience with OWASP Top 10 and related security testing methodologies.
• Ability to document findings with clear risk and remediation guidance.

Responsibilities

• Perform web, API, mobile, and infrastructure penetration testing across enterprise applications.
• Identify, exploit, and validate vulnerabilities using manual testing and tools.
• Produce clear, structured reports outlining vulnerabilities, root cause, risk, and remediation.
• Research new vulnerabilities and attack techniques to enhance coverage.
• Support re-testing and adversary simulation exercises when required.
• Map attack surfaces and document attack paths and gaps.
• Assist in controlled exploitation activities under guidance.

Skills

Web app security

API security

Network security basics

OWASP Top 10

Manual testing

Documentation & reporting

Education

Bachelor's in CS or Info Sec

Certs desirable (OSCP/OSWA/CWES/BSCP)

Tools

Burp Suite

Nmap

sqlmap

Job description

Sun Life Philippines is seeking a Penetration Testing Analyst to perform hands-on security testing of applications, infrastructure, and systems across our enterprise ecosystem. The role emphasizes penetration testing delivery with exposure to red team activities.

The successful candidate will have strong technical testing skills, experience with Burp Suite, Nmap or similar tools, and a drive to expand offensive security capabilities within a collaborative, growth-focused environment.