Security Engineer

Artech Technology Inc.; Quezon City; On-site; PHP 334,800 - 669,600; Full time

Job summary

A technology firm is seeking a skilled professional for product security testing and reporting, including black box reverse engineering and vulnerability research. Responsibilities include conducting penetration tests on mobile and web applications, facilitating threat models, and performing security analysis on supply chains. Candidates should have experience with security training and outreach. This role provides an opportunity to work with cross-functional teams and make a significant impact on security practices.

Qualifications

• Experience in product security testing and reporting.
• Strong understanding of manual penetration testing.
• Proficient in threat modeling and security training.

Responsibilities

• Perform product security testing and reporting.
• Conduct manual penetration testing across various platforms.
• Facilitate threat modeling with cross-functional teams.
• Perform security training for internal teams.
• Analyze security in ICS/OT environments.
• Evaluate hardware and software supply chains.

Skills

Black box reverse engineering

Vulnerability research

Exploit development

Fuzz testing

Protocol reverse engineering

Manual penetration testing

Mobile Applications (iOS & Android)

Web Applications

Cloud Infrastructure

Network Systems

Job description

Product Security Testing and Reporting

• Perform product security testing and reporting, including but not limited to:
• Black box reverse engineering of hardware and firmware
• Vulnerability research
• Exploit development
• Fuzz testing
• Protocol reverse engineering

Penetration Testing

• Conduct manual penetration testing, including but not limited to:
• Mobile Applications (iOS & Android)
• Web Applications
• Cloud Infrastructure
• Network Systems

Threat Modeling and Collaboration

• Facilitate threat modeling with Copeland application, infrastructure, and product teams.

Security Training and Outreach

• Perform security training and outreach to internal development teams.

ICS / OT and Manufacturing Security

• Perform security analysis & evaluation of IC/OT environments related to product manufacturing.

Supply Chain Security

• Perform security analysis & evaluation of both hardware and software supply chains.

Documentation and Metrics

• Maintain documentation and metrics for the product security program’s services.