VAPT Specialist

Hammerjack Pty Ltd; Metro Manila; On-site; PHP 500,000 - 750,000; Full time

Job summary

Hammerjack Pty Ltd in Ortigas, Manila, is seeking a Vulnerability Assessment and Penetration Testing professional for 100% onsite work. The role focuses on VAPT across host/server/workstation, network devices, web apps, APIs, source code, mobile apps, cloud security, and more.

You will document findings, present reports to stakeholders, and coordinate remediation with cross-functional teams, while staying current with threat intelligence and OWASP Top 10 guidance.

Qualifications

• Bachelor's degree in IT or related 4-year course.
• Minimum 1 year of experience in web and mobile application VAPT, security research, or purple teaming.
• Experience with open source and commercial security testing tools like Kali Linux, Metasploit, Qualys, Nessus, BurpSuite, OWASP ZAP, etc.
• Ability to write assessment reports understandable by both technical and non-technical audiences.
• Preferably with certifications like CEH, CISSP, etc.

Responsibilities

• Conducts VAPT across host/server/workstation, network devices, web applications, web APIs, source code, mobile apps, cloud security, and related security tools.
• Documentation and submission of VAPT reports and periodic documents; present findings to stakeholders clearly.
• Provide support to cybersecurity and non-cybersecurity groups related to vulnerability assessment and testing.
• Perform validation and tracking until closure of vulnerabilities; monitor CVE and zero-day analysis; support Threat Exposure and Attack Surface Management initiatives.

Skills

VAPT experience

OWASP Top 10

Report writing

Technical communication

Education

Bachelor's degree in IT or related field

Tools

Kali Linux

Metasploit

Qualys

Nessus

BurpSuite

OWASP ZAP

Job description

Work Location: 100% Onsite in Ortigas (near the Medical City)

Shift: Dayshift

RESPONSIBILITIES:

Conducts Vulnerability Assessment and Penetration Testing (VAPT) to any but not limited to the following:

• Host/Server/Workstation
• Network Device
• Web Application
• Web API
• Source Code
• Mobile App
• Wireless Device
• Software Application
• In-house Application
• Cloud Security
• Security Tool

Documentations and other tasks

• Generation, documentation, and submission of VAPT reports, periodic reports, and other relevant documents
• Present the report findings to stakeholders in a clear and concise manner
• Provide support to other Cybersecurity and non-Cybersecurity groups in relation to vulnerability assessment and testing
• Perform validation and tracking until closure of vulnerabilities identified from different Threat Intelligence resources, monitor CVE, conduct zero-day analysis and cloud security
• Involvement with Threat Exposure and Attack Surface Management Team's project initiatives.

Qualifications:

• Graduate with Bachelor's degree in IT or other 4 years course.
• At least 1 year working experience on web and mobile application VAPT or security researcher or purple teaming following the OWASP Top 10 testing framework
• With working experience on open source and commercial security testing tools like Kali Linux, Metasploit, Qualys, Nessus, BurpSuite, OWASP Zap, etc.
• With working knowledge on web application and mobile application development
• Must be able to write assessment reports that is understandable by both technical and non-technical audiences
• Preferably with relevant Cybersecurity certifications like CEH, CISSP, etc.

Work arrangement:100% onsite in Ortigas and dayshift.

What do we have in store for you

• A professional career adapted to your personal goals, with growth and development opportunities for all professionals
• Challenging projects with impact for leading clients in a wide range of industries
• Competitive renumeration and flexible benefits package which you may customize based on your individual needs and lifestyle
• Continuous learning and development through our Open University's virtual campus, with access to the Udemy for Business platform with more than 3,000 specialized courses
• Meaningful engagement with other employees while leading a balanced and healthy lifestyle through our clubs and various sports activities

Join Indra and have a professional career adapted to your personal goals, with continuous training in a flexible environment, and where people are the core.

Diversity is a key element of our culture. Our policies reflect our commitment to equal opportunities and recognizing the value of people and their work, and the social and natural environment wherein we operation. As such, equal opportunities, diversity, respect for people and non-discrimination (race, gender, language, religion, disability, sexual orientation, opinion, origin, economic position, birth, union membership or any other personal/social condition or circumstance) are basic principles of action for all the company's Professionals, as well as our Partners.