Senior Security Consultant – Open Source Vulnerability

Hammerjack Pty Ltd; Manila; On-site; PHP 1,200,000 - 2,100,000; Full time

Job summary

Hammerjack Pty Ltd in Manila is seeking an experienced security professional to lead vulnerability analysis and OSS security assessment across projects.

You will investigate findings, validate exploitability, model threats, and contribute to AI dataset improvements while collaborating with engineering teams. Requires 5+ years of hands-on security experience and strong coding skills in C/C++, Go, Java, Python.

Qualifications

• 5+ years of hands-on experience in Application Security, Vulnerability Research, Penetration Testing, Product Security, or Secure Software Engineering.
• Proven experience in Open Source Software (OSS) Security Assessment and Vulnerability Analysis.
• Strong code review and debugging capabilities.

Responsibilities

• Analyze and investigate security findings generated by automated vulnerability scanners.
• Differentiate genuine vulnerabilities from false positives, informational findings, and AI-generated hallucinations.
• Perform root cause analysis of identified vulnerabilities.
• Validate exploitability and business impact of reported issues.
• Develop project-level threat models for OSS repositories.

Skills

C/C++

Go

Java

Python

Bash

Job description

Experience:

• 5+ years of hands‑on experience in Application Security, Vulnerability Research, Penetration Testing, Product Security, or Secure Software Engineering.
• Proven experience in Open Source Software (OSS) Security Assessment and Vulnerability Analysis.

Key Responsibilities

Vulnerability Analysis & Validation

• Analyze and investigate security findings generated by automated vulnerability scanners.
• Differentiate genuine vulnerabilities from false positives, informational findings, and AI-generated hallucinations.
• Perform root cause analysis of identified vulnerabilities.
• Validate exploitability and business impact of reported issues.

Threat Modeling & Security Assessment

• Develop project-level threat models for OSS repositories.
• Identify attack surfaces, trust boundaries, and security risks.
• Evaluate security implications within the broader application ecosystem.
• Apply risk-based security evaluation methodologies.
• Document triage decisions and vulnerability classifications.
• Contribute to the creation of golden datasets for AI model training and benchmarking.
• Provide feedback to improve automated vulnerability detection systems.

Skills

Strong code review and debugging capabilities in:

• C/C++
• Go
• Java
• Python
• Additional ing capability in Bash or equivalent preferred