Senior OSS Security Consultant: Vulnerability & Threat Modeling

Hammerjack Pty Ltd; Metro Manila; On-site; PHP 900,000 - 1,800,000; Full time

Job summary

Hammerjack Pty Ltd in Metro Manila is seeking an experienced security professional to lead vulnerability analysis and threat modeling for OSS-enabled applications. You will review findings, validate impact, and drive secure engineering practices across projects.

Expertise in C/C++, Go, Java, Python and Bash scripting is preferred, with 5+ years in application security and vulnerability research. Collaboration with engineering teams is essential for robust risk mitigation.

Qualifications

• 5+ years of hands-on experience in application security, vulnerability research, pentesting or secure software engineering.
• Proven OSS security assessment and vulnerability analysis experience.
• Ability to review code and debug in multiple languages.

Responsibilities

• Analyze and investigate security findings from automated scanners.
• Differentiate genuine vulnerabilities from false positives and AI hallucinations.
• Perform root cause analysis and validate exploitability and impact.
• Develop project-level threat models for OSS repos and assess attack surfaces.
• Document triage decisions and contribute to safe security practices.

Skills

C/C++

Go

Java

Python

Bash/scripting

Job description

Hammerjack Pty Ltd in Metro Manila is seeking an experienced security professional to lead vulnerability analysis and threat modeling for OSS-enabled applications. You will review findings, validate impact, and drive secure engineering practices across projects.

Expertise in C/C++, Go, Java, Python and Bash scripting is preferred, with 5+ years in application security and vulnerability research. Collaboration with engineering teams is essential for robust risk mitigation.