Senior Application Penetration Tester

DysrupIT Pty; Manila; On-site; PHP 700,000 - 1,100,000; Full time

Benefits offered by this job

Health insurance

Remote or flexible work options

Job summary

DysrupIT Pty is seeking an Application Penetration Tester to assess web, mobile, and API-based applications for security weaknesses. You will plan and run tests, document findings clearly, and help engineering teams fix issues before attackers find them.

You will work on engagements for Australian clients, so familiarity with local data protection and cyber compliance requirements is a strong advantage. Join a team that values precise testing, clear reporting, and proactive remediation, with

Qualifications

• 3–5+ years hands-on application penetration testing experience.
• Strong knowledge of OWASP Top 10, ASVS, and API Security Top 10.

Responsibilities

• Plan and carry out penetration tests on web apps, APIs, and mobile apps (black/grey/white-box).
• Find and safely exploit vulnerabilities such as injection flaws, broken auth, and misconfigurations.
• Perform manual testing with automated scanning and validate results.
• Write clear reports with risk ratings, PoCs, business impact, and remediation steps.
• Present findings to technical and non-technical stakeholders.
• Retest fixes and confirm closure of issues.
• Map findings to standards and client compliance obligations.
• Support secure code review and threat modelling where needed.
• Keep up with new attack techniques, tools, and vulnerabilities.

Skills

Penetration testing

OWASP Top 10/ASVS/API Security Top 10

English report writing

Independent work

Security testing mindset

Cloud security awareness

Tools

Burp Suite

Nmap

SQLmap

Postman

Frida

MobSF

AWS/Azure/GCP basics

Job description

DysrupIT Pty is seeking an Application Penetration Tester to assess web, mobile, and API-based applications for security weaknesses. You will plan and run tests, document findings clearly, and help engineering teams fix issues before attackers find them.

You will work on engagements for Australian clients, so familiarity with local data protection and cyber compliance requirements is a strong advantage. Join a team that values precise testing, clear reporting, and proactive remediation, with