Senior AppSec Pen Tester - Web, Mobile & Thick-Client

Radii Global; Philippines; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

Radii Global is seeking a Senior Penetration Tester focused on Application Security. You will perform testing across web, mobile, and thick-client apps, with web testing as the main workload and mobile testing making up about 20% of the work. Knowledge of OWASP, Kali Linux, and Burp Suite is essential.

The role requires at least 6+ years of hands-on pentesting experience and an OSCP or CREST certification. Independent work style and ability to follow established frameworks are important.

Qualifications

• 6+ years of hands-on penetration testing experience.
• Solid experience in Web Application Security Testing.
• Experience in Mobile Application Security Testing (≈20% workload).
• Experience with Android/iOS testing and API Security testing (preferred).

Responsibilities

• Conduct application security penetration testing across web, mobile, and thick-client applications.
• Perform Web Application Security Testing as the primary workload.
• Conduct Mobile Application Penetration Testing (~20% of workload).
• Perform Thick Client Security Testing; training possible for strong candidates.
• Identify, validate, and exploit vulnerabilities within defined scope.
• Document findings with evidence, risk, impact, and remediation guidance.
• Prepare detailed reports for technical and business stakeholders.
• Retest vulnerabilities after remediation.

Skills

Penetration testing

Web application security

Mobile application security

OWASP knowledge

Report writing

Education

OSCP or CREST certification

Tools

Kali Linux

Burp Suite

Job description

Radii Global is seeking a Senior Penetration Tester focused on Application Security. You will perform testing across web, mobile, and thick-client apps, with web testing as the main workload and mobile testing making up about 20% of the work. Knowledge of OWASP, Kali Linux, and Burp Suite is essential.

The role requires at least 6+ years of hands-on pentesting experience and an OSCP or CREST certification. Independent work style and ability to follow established frameworks are important.