VAPT Engineer

TechTiera Corporation; Philippines; On-site; PHP 664,000 - 898,000; Full time

Job summary

TechTiera Corporation in the Philippines is seeking a VAPT Engineer to conduct vulnerability assessments and penetration testing across web, mobile, APIs, and networks. You will perform manual and automated testing, identify weaknesses, and prepare detailed reports.

The role requires 3+ years in security testing, familiarity with OWASP Top 10, Burp Suite, Nmap, and DevSecOps practices, and the ability to collaborate with developers and IT teams.

Qualifications

• 3+ years of experience in vulnerability scanning, analysis & penetration testing of websites, cloud-hosted apps, APIs and networks.
• Experience performing both manual and automated security testing.
• Familiarity with DevSecOps and integrating security into CI/CD pipelines.
• Ability to create clear technical documentation and reports.

Responsibilities

• Perform VAPT on web/mobile apps, APIs, networks and cloud environments.
• Conduct manual and automated security testing; identify vulnerabilities and propose remediation.
• Prepare detailed technical reports and executive summaries; collaborate with teams to validate fixes.
• Stay updated with latest threats and security tools; support audits and compliance.

Skills

OWASP Top 10

Network security

Web application security

API security

Authentication & authorization

Mobile framework

Scripting

Secure coding

Manual penetration testing

Exploit validation

DevSecOps

CI/CD

Documentation

Tools

Burp Suite

Nmap

Metasploit

Nessus

Wireshark

OpenVAS

Linux

Windows

Python

Bash

PowerShell

Job description

Salary: 70,000

VAPT Engineer

Join Our Team – VAPT Engineer (Vulnerability Assessment & Penetration Testing)

Cybersecurity

We are looking for a highly motivated and skilled VAPT Engineer to join our growing cybersecurity team. The ideal candidate will be responsible for identifying security vulnerabilities across web applications, mobile applications, APIs, networks, and infrastructure through comprehensive vulnerability assessments and penetration testing.

If you are passionate about ethical hacking, offensive security, and helping organizations strengthen their cybersecurity posture, we want to hear from you.

Job Title

VAPT Engineer / Penetration Tester

Employment Type

• Full-Time

Key Responsibilities

• Perform Vulnerability Assessment and Penetration Testing (VAPT) on:
• Web applications
• Mobile applications
• APIs
• Internal & external networks
• Cloud environments
• Conduct manual and automated security testing.
• Identify vulnerabilities, exploit weaknesses, and provide remediation recommendations.
• Prepare detailed technical reports and executive summaries.
• Collaborate with development and infrastructure teams to validate fixes.
• Perform security re-testing after remediation.
• Stay updated with the latest cybersecurity threats, attack techniques, and security tools.
• Support security audits and compliance assessments when required.

Required Skills & Experience

• Strong understanding of:
• OWASP Top 10
• Network security
• Web application security
• API security
• Authentication & authorization mechanisms
• Mobile framework
• Hands-on experience with tools such as:
• Burp Suite
• Nmap
• Metasploit
• Nessus
• Wireshark
• OpenVAS
• Knowledge of:
• Linux & Windows environments
• Scripting (Python, Bash, PowerShell)
• Secure coding concepts
• Experience in manual penetration testing and exploit validation.
• Ability to create clear technical documentation and reports.
• Proven track records of 3+ years of experience in vulnerability scanning, analysis & penetration testing of websites, cloud hosted applications, APIs and networks.
• Knowledge of DevSecOps and integrating security into CI/CD pipelines.
• Application session management.
• Good knowledge of modifying and compiling exploit code.
• Had exposures in Ethical Hacking competitions and programs like Bug Bounty, Capture the Flag etc.

Preferred Qualifications

• Certifications such as:
• OSCP
• CEH
• eJPT
• GWAPT
• CISSP
• SANS
• GXPN
• Experience with:
• Mobile app testing
• Cloud security
• Red Team activities
• Source code review
• DevSecOps

Nice to Have

• Experience in fintech, banking, or wallet applications.
• Knowledge of secure SDLC and compliance frameworks.
• Experience handling aggressive SLA production environments.