Senior Penetration Tester: Embedded & Cloud Security

Hammerjack Pty Ltd; Manila; On-site; PHP 800,000 - 1,200,000; Full time

Job summary

De ion, a global technology company, seeks a Senior Pen Tester to lead security assessments across embedded devices and cloud services (AWS/Azure). You will perform white/black box testing, document findings, and guide design teams in mitigating risks.

The ideal candidate has 5+ years in application security or security operations, with broad attack-vector expertise and strong communication skills for a multinational audience. You will stay ahead of threats and improve internal testing processes.

Qualifications

• Five (5) years of experience in application security and/or security operations, with a focus on pen and mobile testing.
• Solid understanding of security protocols, cryptography, authentication, authorization, and security.

Responsibilities

• Conduct security evaluation and threat assessments of embedded systems, mobile applications, web applications
• Conduct research for the purposes of finding new vulnerabilities and enhancing existing capabilities
• Circumventing security protection methods and techniques
• Performing data bus monitoring (snooping) and data injection
• Conduct communications protocol analysis in the embedded products, and applications
• Conduct wireless communications channel snooping, and data injection
• Reverse engineering complex systems and protocols
• Create detailed technical reports and proof of concept code to document findings
• Perform System Breakdown of the project/product before testing, identify and evaluate all the testing requirements and plan out the detailed testing activities, resources etc.
• Proactive detailed interaction with respective engineering group on the testing needs, testing progress/status and provide detailed analysis report
• Have effective Gitlab issue management reviewing and, providing mentorship and direction on planned testing activities for junior resources in line with defined processes and procedures.
• Assist in leading testing activities in all the regions, provide head-to-head support to Assessment Pillar Manager and help to drive continuous improvement in testing processes and procedures.
• Thorough adherence and follow-up of VERTIV SECURE requirements and Vulnerability Management and Incident Response processes.
• Preference given to other practical skills such as: functional analysis, memory image capture, static memory analysis, and data element extraction, etc.

Skills

CISSP

CEH

Penetration testing

Tools

Burp Suite

Metasploit

Nessus

Job description

De ion, a global technology company, seeks a Senior Pen Tester to lead security assessments across embedded devices and cloud services (AWS/Azure). You will perform white/black box testing, document findings, and guide design teams in mitigating risks.

The ideal candidate has 5+ years in application security or security operations, with broad attack-vector expertise and strong communication skills for a multinational audience. You will stay ahead of threats and improve internal testing processes.