Senior Security Consultant – Open Source Vulnerability

Hammerjack Pty Ltd; Metro Manila; On-site; PHP 900,000 - 1,800,000; Full time

Job summary

Hammerjack Pty Ltd in Metro Manila is seeking an experienced security professional to lead vulnerability analysis and threat modeling for OSS-enabled applications. You will review findings, validate impact, and drive secure engineering practices across projects.

Expertise in C/C++, Go, Java, Python and Bash scripting is preferred, with 5+ years in application security and vulnerability research. Collaboration with engineering teams is essential for robust risk mitigation.

Qualifications

• 5+ years of hands-on experience in application security, vulnerability research, pentesting or secure software engineering.
• Proven OSS security assessment and vulnerability analysis experience.
• Ability to review code and debug in multiple languages.

Responsibilities

• Analyze and investigate security findings from automated scanners.
• Differentiate genuine vulnerabilities from false positives and AI hallucinations.
• Perform root cause analysis and validate exploitability and impact.
• Develop project-level threat models for OSS repos and assess attack surfaces.
• Document triage decisions and contribute to safe security practices.

Skills

C/C++

Go

Java

Python

Bash/scripting

Job description

Experience:

• 5+ years of hands-on experience in Application Security, Vulnerability Research, Penetration Testing, Product Security, or Secure Software Engineering.
• Proven experience in Open Source Software (OSS) Security Assessment and Vulnerability Analysis.

Key Responsibilities

Vulnerability Analysis & Validation

• Analyze and investigate security findings generated by automated vulnerability scanners.
• Differentiate genuine vulnerabilities from false positives, informational findings, and AI-generated hallucinations.
• Perform root cause analysis of identified vulnerabilities.
• Validate exploitability and business impact of reported issues.

Threat Modeling & Security Assessment

• Develop project-level threat models for OSS repositories.
• Identify attack surfaces, trust boundaries, and security risks.
• Evaluate security implications within the broader application ecosystem.
• Apply risk-based security evaluation methodologies.
• Document triage decisions and vulnerability classifications.
• Contribute to the creation of golden datasets for AI model training and benchmarking.
• Provide feedback to improve automated vulnerability detection systems.

Skills

Strong code review and debugging capabilities in:

• C/C++
• Go
• Java
• Python
• Additional ing capability in Bash or equivalent preferred