Senior Web App Security Engineer - AI‑Augmented Pen Tester

Rising Tide Digital Inc; Taguig; On-site; PHP 1,800,000 - 3,200,000; Full time

Job summary

Rising Tide Digital Inc in Taguig, Philippines seeks a highly technical Senior Web Application Penetration Testing Engineer to perform deep offensive security testing of complex web applications and APIs. This hands-on role focuses on identifying business-logic flaws, authorization bypasses, and multi-step attack chains.

You will leverage AI-assisted testing alongside Burp Suite Pro and custom tooling, validate AI-generated hypotheses, and develop reproducible proofs of concept.

Qualifications

• 5+ years of hands-on application security or pentesting experience.
• Proven ability to find business-logic and authorization flaws through manual analysis.
• Advanced hands-on use of Burp Suite Professional and related tooling.
• Strong knowledge of OWASP Web Security Testing Guide, OWASP Top 10, and OWASP API Security Top 10.
• Excellent technical writing and ability to explain complex exploitation paths to diverse audiences.

Responsibilities

• Perform full-scope penetration testing of web apps, APIs, and supporting services.
• Conduct threat modeling and analyze architecture, trust boundaries, auth models, and data flows.
• Perform deep manual security testing beyond standard scanners and checklists.
• Develop reproducible proofs-of-concept showing technical and business impact.
• Test with multiple identities, roles, and workflow states to reveal authorization weaknesses.
• Document findings and work with engineering teams to remediate and retest.

Skills

Hands-on security testing

Technical writing

Cross-functional communication

Threat modeling

Education

OSWE/GWAPT/OSCP/BSCP certifications

Tools

Burp Suite Professional

Python scripting

Job description

Rising Tide Digital Inc in Taguig, Philippines seeks a highly technical Senior Web Application Penetration Testing Engineer to perform deep offensive security testing of complex web applications and APIs. This hands-on role focuses on identifying business-logic flaws, authorization bypasses, and multi-step attack chains.

You will leverage AI-assisted testing alongside Burp Suite Pro and custom tooling, validate AI-generated hypotheses, and develop reproducible proofs of concept.