VAPT Specialist

Indra Group USA; Manila; On-site; PHP 600,000 - 900,000; Full time

Job summary

Indra Group USA seeks a skilled cybersecurity professional to perform vulnerability assessment and penetration testing across hosts, networks, web apps, APIs, source code, and mobile platforms. You will prepare comprehensive reports and present findings to stakeholders, supporting both cybersecurity and non-security teams.

Minimum 2.5 years in web/mobile VAPT with OWASP Top 10, plus familiarity with ICS/OT or DevOps is a plus.

Qualifications

• Graduate with Bachelors degree in IT or other 4 years course.
• At least 2.5 years of working experience on web and mobile application VAPT following the OWASP Top 10 testing framework.
• Knowledge in ICS/OT or DevOps is a plus.
• Experience with open source and commercial security testing tools like Kali Linux, Metasploit, Qualys, Nessus, BurpSuite, OWASP ZAP.
• Knowledge of CVSS and CVE to identify vulnerabilities.
• Ability to write assessment reports understandable by technical and non-technical audiences.
• Certifications like CEH, CISSP are a plus but not required.

Responsibilities

• Conducts vulnerability assessment and penetration testing (VAPT) across hosts, networks, web applications, APIs, source code, mobile apps, wireless devices, software and in-house applications, and cloud security.
• Generates, documents, and submits VAPT reports and periodic reports; presents findings to stakeholders clearly.
• Provides support to cybersecurity and non-cybersecurity teams during assessments.
• Validates and tracks vulnerabilities until closure based on threat intelligence sources.
• Participates in Threat Exposure and Attack Surface Management initiatives.

Skills

VAPT expertise

Technical writing

Stakeholder communication

Education

Bachelor's degree in IT or related field

Tools

Kali Linux

Metasploit

Qualys

Nessus

BurpSuite

OWASP ZAP

Job description

Job Description

Responsibilities

Conducts Vulnerability Assessment and Penetration Testing (VAPT) across, but not limited to, the following:

• Host / Server / Workstation
• Network Device
• Web Application
• Web API
• Source Code
• Mobile Application
• Wireless Device
• Software Application
• In-house Application
• Cloud Security
• Security Tools

Documentation and other tasks:

• Generation, documentation, and submission of VAPT reports, periodic reports, and other relevant documents
• Presentation of report findings to stakeholders in a clear and concise manner
• Provision of support to Cybersecurity and non-Cybersecurity teams in relation to vulnerability assessment and testing
• Validation and tracking of vulnerabilities until closure based on Threat Intelligence sources
• Participation in Threat Exposure and Attack Surface Management initiatives

Qualifications

• Graduate with Bachelors degree in IT or other 4 years course.
• At least 2.5 years of working experience on web and mobile application VAPT following the OWASP Top 10 testing framework
• Has knowledge in IC S (Industrial Control System)/OT (Operational Technology) or any related to Dev Ops is a plus.
• With working experience on open source and commercial security testing tools like Kali Linux, Metasploit, Qualys, Nessus, BurpSuite, OWASP Zap, etc.
• With working knowledge on web application and mobile application development or has experience in CVSS and CVE to help identify vulnerabilities.
• Must be able to write assessment reports that is understandable by both technical and non-technical audience
• Preferably with relevant Cybersecurity certifications like CEH, CISSP, etc, but not required.

Work set-up

100% onsite in Ortigas (near the Medical City)

Requirements