VAPT Engineer: Offensive Security & App Pen Testing

TechTiera Corporation; Philippines; On-site; PHP 664,000 - 898,000; Full time

Job summary

TechTiera Corporation in the Philippines is seeking a VAPT Engineer to conduct vulnerability assessments and penetration testing across web, mobile, APIs, and networks. You will perform manual and automated testing, identify weaknesses, and prepare detailed reports.

The role requires 3+ years in security testing, familiarity with OWASP Top 10, Burp Suite, Nmap, and DevSecOps practices, and the ability to collaborate with developers and IT teams.

Qualifications

• 3+ years of experience in vulnerability scanning, analysis & penetration testing of websites, cloud-hosted apps, APIs and networks.
• Experience performing both manual and automated security testing.
• Familiarity with DevSecOps and integrating security into CI/CD pipelines.
• Ability to create clear technical documentation and reports.

Responsibilities

• Perform VAPT on web/mobile apps, APIs, networks and cloud environments.
• Conduct manual and automated security testing; identify vulnerabilities and propose remediation.
• Prepare detailed technical reports and executive summaries; collaborate with teams to validate fixes.
• Stay updated with latest threats and security tools; support audits and compliance.

Skills

OWASP Top 10

Network security

Web application security

API security

Authentication & authorization

Mobile framework

Scripting

Secure coding

Manual penetration testing

Exploit validation

DevSecOps

CI/CD

Documentation

Tools

Burp Suite

Nmap

Metasploit

Nessus

Wireshark

OpenVAS

Linux

Windows

Python

Bash

PowerShell

Job description

TechTiera Corporation in the Philippines is seeking a VAPT Engineer to conduct vulnerability assessments and penetration testing across web, mobile, APIs, and networks. You will perform manual and automated testing, identify weaknesses, and prepare detailed reports.

The role requires 3+ years in security testing, familiarity with OWASP Top 10, Burp Suite, Nmap, and DevSecOps practices, and the ability to collaborate with developers and IT teams.