VAPT Engineer: Offensive Security & App Security Testing

ATOMIT Corp.; Philippines; On-site; PHP 600,000 - 1,000,000; Full time

Job summary

ATOMIT Corp. is seeking a VAPT Engineer to identify and assess security vulnerabilities across web apps, mobile apps, APIs, networks, cloud, and infrastructure through comprehensive vulnerability assessments and penetration testing.

You will perform both manual and automated testing, identify weaknesses, and provide actionable remediation with detailed reporting. Collaboration with development and operations teams is essential to validate fixes and improve security posture.

Qualifications

• At least 3 years of experience in vulnerability scanning, analysis, and penetration testing of websites, cloud-hosted apps, APIs, and networks.
• Strong understanding of OWASP Top 10, network security, web app security, API security, authn/authz, and mobile security frameworks.
• Hands-on experience with security tools: Burp Suite, Nmap, Metasploit, Nessus, Wireshark, OpenVAS.

Responsibilities

• Perform VAPT on web/mobile apps, APIs, networks, and cloud environments.
• Conduct manual and automated security testing.
• Identify vulnerabilities and provide remediation recommendations.
• Prepare detailed technical reports and executive summaries.
• Collaborate with dev and infra teams to verify security fixes.
• Perform security re-testing after remediation.
• Stay updated on threats, techniques, and tools.
• Support audits, compliance assessments, and security initiatives.

Skills

VAPT

Security testing

Burp Suite

Nmap

Metasploit

Nessus

Wireshark

OpenVAS

Python

Bash

PowerShell

Web API security

Mobile security

Tools

Burp Suite

Nmap

Metasploit

Nessus

Wireshark

OpenVAS

Job description

ATOMIT Corp. is seeking a VAPT Engineer to identify and assess security vulnerabilities across web apps, mobile apps, APIs, networks, cloud, and infrastructure through comprehensive vulnerability assessments and penetration testing.

You will perform both manual and automated testing, identify weaknesses, and provide actionable remediation with detailed reporting. Collaboration with development and operations teams is essential to validate fixes and improve security posture.