VAPT Security Analyst (Onsite)

Indra Group; Philippines; On-site; PHP 600,000 - 1,000,000; Full time

Job summary

Indra Group in the Philippines is seeking a VAPT Specialist to conduct vulnerability assessments and penetration testing across web/mobile apps, networks, and devices, following OWASP Top 10.

The candidate should have at least 2.5 years of relevant experience and familiarity with security tools like Kali Linux, Metasploit, BurpSuite, Nessus, and OWASP ZAP; strong report-writing for technical and non-technical audiences is essential. Onsite in Ortigas, near Medical City.

Qualifications

• Bachelor's degree in IT or related 4-year course required.
• At least 2.5 years of experience in web and mobile VAPT per OWASP Top 10.
• Knowledge of ICS/OT or DevOps is a plus.
• Experience with open-source and commercial security testing tools.
• Ability to write clear assessment reports for technical and non-technical audiences.
• Cybersecurity certifications like CEH/CISSP preferred but not required.

Responsibilities

• Conducts VAPT across host, server, workstation, network, web apps and more.
• Generates, documents, and submits VAPT reports and periodic reports.
• Presents findings to stakeholders in a clear, concise manner.
• Provides support to Cybersecurity and other teams during assessments.
• Validation and tracking of vulnerabilities until closure based on Threat Intelligence.
• Participation in Threat Exposure and Attack Surface Management initiatives.

Skills

Cybersecurity

Technical writing

Communication

VAPT methodology

OWASP Top 10

Education

Bachelor's degree in IT or related 4-year course

Tools

Kali Linux

Metasploit

Burp Suite

Nessus

Qualys

OWASP Zap

Job description

Indra Group in the Philippines is seeking a VAPT Specialist to conduct vulnerability assessments and penetration testing across web/mobile apps, networks, and devices, following OWASP Top 10.

The candidate should have at least 2.5 years of relevant experience and familiarity with security tools like Kali Linux, Metasploit, BurpSuite, Nessus, and OWASP ZAP; strong report-writing for technical and non-technical audiences is essential. Onsite in Ortigas, near Medical City.