VAPT Specialist

Indra Group; Philippines; On-site; PHP 600,000 - 1,000,000; Full time

Job summary

Indra Group in the Philippines is seeking a VAPT Specialist to conduct vulnerability assessments and penetration testing across web/mobile apps, networks, and devices, following OWASP Top 10.

The candidate should have at least 2.5 years of relevant experience and familiarity with security tools like Kali Linux, Metasploit, BurpSuite, Nessus, and OWASP ZAP; strong report-writing for technical and non-technical audiences is essential. Onsite in Ortigas, near Medical City.

Qualifications

• Bachelor's degree in IT or related 4-year course required.
• At least 2.5 years of experience in web and mobile VAPT per OWASP Top 10.
• Knowledge of ICS/OT or DevOps is a plus.
• Experience with open-source and commercial security testing tools.
• Ability to write clear assessment reports for technical and non-technical audiences.
• Cybersecurity certifications like CEH/CISSP preferred but not required.

Responsibilities

• Conducts VAPT across host, server, workstation, network, web apps and more.
• Generates, documents, and submits VAPT reports and periodic reports.
• Presents findings to stakeholders in a clear, concise manner.
• Provides support to Cybersecurity and other teams during assessments.
• Validation and tracking of vulnerabilities until closure based on Threat Intelligence.
• Participation in Threat Exposure and Attack Surface Management initiatives.

Skills

Cybersecurity

Technical writing

Communication

VAPT methodology

OWASP Top 10

Education

Bachelor's degree in IT or related 4-year course

Tools

Kali Linux

Metasploit

Burp Suite

Nessus

Qualys

OWASP Zap

Job description

Select how often (in days) to receive an alert:

VAPT Specialist

Location: PH

Profile: Cybersecurity

Required experience:

Working mode:

Responsibilities:

Conducts Vulnerability Assessment and Penetration Testing (VAPT) across, but not limited to, the following:

• Host / Server / Workstation
• Network Device
• Web Application
• Web API
• Source Code
• Wireless Device
• Software Application
• In-house Application
• Security Tools

Documentation and other tasks:

• Generation, documentation, and submission of VAPT reports, periodic reports, and other relevant documents
• Presentation of report findings to stakeholders in a clear and concise manner
• Provision of support to Cybersecurity and non-Cybersecurity teams in relation to vulnerability assessment and testing
• Validation and tracking of vulnerabilities until closure based on Threat Intelligence sources
• Participation in Threat Exposure and Attack Surface Management initiatives

Qualifications:

• Graduate with Bachelor's degree in IT or other 4 years course.
• At least 2.5 years of working experience on web and mobile application VAPT following the OWASP Top 10 testing framework
• Has knowledge in IC S (Industrial Control System)/OT (Operational Technology) or any related to Dev Ops is a plus.
• With working experience on open source and commercial security testing tools like Kali Linux, Metasploit, Qualys, Nessus, BurpSuite, OWASP Zap, etc.
• With working knowledge on web application and mobile application development or has experience in CVSS and CVE to help identify vulnerabilities.
• Must be able to write assessment reports that is understandable by both technical and non-technical audience
• Preferably with relevant Cybersecurity certifications like CEH, CISSP, etc, but not required.

Work set-up: 100% onsite in Ortigas (near the Medical City)