VAPT Engineer

TechTiera Corporation; Makati; On-site; PHP 900,000 - 1,200,000; Full time

Job summary

TechTiera Corporation is seeking a VAPT Engineer to perform vulnerability assessments and penetration testing across web, mobile, APIs, networks, and cloud environments. You will conduct both manual and automated testing and deliver remediation guidance and detailed reports.

The role requires strong knowledge of OWASP Top 10 and hands-on testing with Burp Suite, Nmap, Nessus, Wireshark, and OpenVAS, along with scripting skills in Python, Bash, or PowerShell.

Qualifications

• Strong understanding of OWASP Top 10.
• Knowledge of network and web application security.
• Experience with manual penetration testing and exploit validation.

Responsibilities

• Perform VAPT on web, mobile, API, networks, and cloud environments.
• Conduct manual and automated security testing and provide remediation recommendations.
• Prepare detailed reports and executive summaries.

Skills

OWASP Top 10

Scripting (Python, Bash, PowerShell)

Tools

Burp Suite

Nmap

Nessus

Wireshark

OpenVAS

Job description

Join Our Team – VAPT Engineer (Vulnerability Assessment & Penetration Testing)

Cybersecurity

We are looking for a highly motivated and skilled VAPT Engineer to join our growing cybersecurity team. The ideal candidate will be responsible for identifying security vulnerabilities across web applications, mobile applications, APIs, networks, and infrastructure through comprehensive vulnerability assessments and penetration testing.

If you are passionate about ethical hacking, offensive security, and helping organizations strengthen their cybersecurity posture, we want to hear from you.

Job Title

VAPT Engineer / Penetration Tester

Employment Type

• Full-Time

Key Responsibilities

• Perform Vulnerability Assessment and Penetration Testing (VAPT) on:
• Web applications
• Mobile applications
• APIs
• Internal & external networks
• Cloud environments
• Conduct manual and automated security testing.
• Identify vulnerabilities, exploit weaknesses, and provide remediation recommendations.
• Prepare detailed technical reports and executive summaries.
• Collaborate with development and infrastructure teams to validate fixes.
• Perform security re-testing after remediation.
• Stay updated with the latest cybersecurity threats, attack techniques, and security tools.
• Support security audits and compliance assessments when required.

Required Skills & Experience

• Strong understanding of:
• OWASP Top 10
• Network security
• Web application security
• API security
• Hands-on experience with tools such as:
• Burp Suite
• Nmap
• Nessus
• Wireshark
• OpenVAS
• Knowledge of:
• Scripting (Python, Bash, PowerShell)
• Secure coding concepts
• Experience in manual penetration testing and exploit validation.
• Ability to create clear technical documentation and reports.
• Proven track records of 3+ years of experience in vulnerability scanning, analysis & penetration testing of websites, cloud hosted applications, APIs and networks.
• Knowledge of DevSecOps and integrating security into CI/CD pipelines.
• Good knowledge of modifying and compiling exploit code.
• Had exposures in Ethical Hacking competitions and programs like Bug Bounty, Capture the Flag etc.

Preferred Qualifications

• Certifications such as:
• OSCP
• CEH
• eJPT
• GWAPT
• CISSP
• SANS
• GXPN
• Experience with:
• Red Team activities
• Source code review
• DevSecOps

Nice to Have

• Experience in fintech, banking, or wallet applications.
• Knowledge of secure SDLC and compliance frameworks.
• Experience handling aggressive SLA production environments.