VAPT Security Engineer – Web & Mobile (Onsite Taguig)

Lennor Group; Philippines; On-site; PHP 812,000 - 973,000; Full time

Job summary

PaxSigna, a specialist talent solutions division of the Lennor Group, is seeking a skilled VAPT professional for client engagements in the Philippines. The role focuses on conducting web and mobile application security testing, delivering actionable findings, and guiding remediation with cross‑functional teams.

The ideal candidate has 3–5 years of hands‑on VAPT experience, familiarity with OWASP Top 10, and proficiency with tools like Kali Linux, Metasploit, Burp Suite, and ZAP.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, or a related field.
• 3–5 years of hands‑on experience conducting web and mobile application vulnerability assessments and penetration testing using the OWASP Top 10 framework.
• Experience with open-source and commercial security testing tools like Kali Linux, Metasploit, Qualys, Nessus, Burp Suite, and OWASP ZAP.

Responsibilities

• Conduct vulnerability assessments and penetration testing (VAPT) on web and mobile applications.
• Prepare detailed assessment reports with findings and remediation recommendations.
• Provide technical assistance to development teams for remediation of vulnerabilities.
• Organize and facilitate meetings to coordinate VAPT activities.
• Independently manage activities, schedules, and tickets to ensure timely deliverables.
• Submit progress reports on activities and findings to supervisors.
• Maintain confidentiality and security of client information.

Skills

VAPT

OWASP Top 10

Security reporting

Communication

Education

Bachelor's degree in IT/CS

Tools

Kali Linux

Metasploit

Qualys

Nessus

Burp Suite

OWASP ZAP

Job description

PaxSigna, a specialist talent solutions division of the Lennor Group, is seeking a skilled VAPT professional for client engagements in the Philippines. The role focuses on conducting web and mobile application security testing, delivering actionable findings, and guiding remediation with cross‑functional teams.

The ideal candidate has 3–5 years of hands‑on VAPT experience, familiarity with OWASP Top 10, and proficiency with tools like Kali Linux, Metasploit, Burp Suite, and ZAP.