Senior VAPT Specialist: Web & Mobile Security

PM Consulting

Pasig

On-site

PHP 700,000 - 1,100,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

PM Consulting is seeking a Vulnerability Assessment and Penetration Testing (VAPT) Specialist to identify, assess, and remediate security vulnerabilities across web and mobile applications. This role requires hands-on testing, risk analysis, and collaboration with stakeholders to strengthen application security.

Responsibilities include performing tests, producing actionable reports, and guiding remediation with engineering and support teams.

Qualifications

Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related four-year degree program.
Minimum of 3 years hands-on experience conducting vulnerability assessments and penetration testing for web and mobile applications.
Strong understanding and practical application of the OWASP Top 10 security testing framework.
Experience using open-source and commercial tools including Kali Linux, Metasploit, Qualys, Nessus, Burp Suite, OWASP ZAP.
Working knowledge of web and mobile application development concepts, architectures, and technologies.
Ability to create clear, concise assessment reports for technical and non-technical audiences.
Strong analytical, communication, and problem-solving skills.

Responsibilities

Perform vulnerability assessments and penetration testing activities for web and mobile applications.
Identify security weaknesses, validate vulnerabilities, and assess risks.
Prepare comprehensive assessment reports with findings, risk ratings, and remediation recommendations.
Collaborate with development, engineering, and support teams on remediation and best practices.
Facilitate meetings or sessions to support resolution of identified security issues as required.
Manage assigned security testing activities and ensure timely deliverables.
Provide regular status updates and progress reports to stakeholders and management.
Maintain confidentiality and safeguard sensitive information during testing and reporting.