VAPT Specialist/Offensive Security (100% Onsite)

Indra Philippines, Inc.; Metro Manila; On-site; PHP 600,000 - 900,000; Full time

Benefits offered by this job

Open University access

Udemy for Business access

Flexible benefits package

Job summary

Indra Philippines, Inc. is seeking a cybersecurity professional to conduct comprehensive vulnerability assessment and penetration testing across web, mobile, and other environments.

You will document findings, present to stakeholders, and assist multiple teams in vulnerability handling. The role emphasizes collaboration, understanding of OWASP Top 10, and producing clear, actionable reports for both technical and non-technical audiences.

Qualifications

• Bachelor's degree in IT or related field.
• At least 1 year experience in web and mobile application VAPT or security research.
• Experience with Kali Linux, Metasploit, Qualys, Nessus, BurpSuite, OWASP ZAP, etc.
• Ability to write assessment reports that are understandable to technical and non-technical audiences.
• Preferably with Cybersecurity certifications like CEH, CISSP, etc.

Responsibilities

• Perform vulnerability assessment and penetration testing on web, mobile, and other targets.
• Document and present VAPT findings to stakeholders clearly.
• Provide support to Cybersecurity and other groups in relation to vulnerability assessment.
• Perform validation and tracking until closure of vulnerabilities using Threat Intelligence resources and CVE monitoring.
• Engage with Threat Exposure and Attack Surface Management team initiatives.

Skills

VAPT experience

OWASP Top 10

Report writing

Security collaboration

Education

Bachelor's degree in IT or related field

Tools

Kali Linux

Metasploit

Qualys

Nessus

BurpSuite

OWASP ZAP

Job description

RESPONSIBILITIES:

Conducts Vulnerability Assessment and Penetration Testing (VAPT) to any but not limited to the following:

• Host/Server/Workstation
• Network Device
• Web Application
• Web API
• Source Code
• Mobile App
• Wireless Device
• Software Application
• In-house Application
• Cloud Security
• Security Tool

Documentations and other tasks

• Generation, documentation, and submission of VAPT reports, periodic reports, and other relevant documents
• Present the report findings to stakeholders in a clear and concise manner
• Provide support to other Cybersecurity and non-Cybersecurity groups in relation to vulnerability assessment and testing
• Perform validation and tracking until closure of vulnerabilities identified from different Threat Intelligence resources, monitor CVE, conduct zero-day analysis and cloud security
• Involvement with Threat Exposure and Attack Surface Management Team’s project initiatives.

Qualifications:

• Graduate with Bachelor's degree in IT or other 4 years course.
• At least 1 year working experience on web and mobile application VAPT or security researcher or purple teaming following the OWASP Top 10 testing framework
• With working experience on open source and commercial security testing tools like Kali Linux, Metasploit, Qualys, Nessus, BurpSuite, OWASP Zap, etc.
• With working knowledge on web application and mobile application development
• Must be able to write assessment reports that is understandable by both technical and non-technical audiences
• Preferably with relevant Cybersecurity certifications like CEH, CISSP, etc.

Work arrangement:

100% onsite in Ortigas and dayshift.

What do we have in store for you?

• A professional career adapted to your personal goals, with growth and development opportunities for all professionals
• Challenging projects with impact for leading clients in a wide range of industries
• Competitive renumeration and flexible benefits package which you may customize based on your individual needs and lifestyle
• Continuous learning and development through our Open University's virtual campus, with access to the Udemy for Business platform with more than 3,000 specialized courses
• Meaningful engagement with other employees while leading a balanced and healthy lifestyle through our clubs and various sports activities

Join Indra and have a professional career adapted to your personal goals, with continuous training in a flexible environment, and where people are the core.

Diversity is a key element of our culture. Our policies reflect our commitment to equal opportunities and recognizing the value of people and their work, and the social and natural environment wherein we operation. As such, equal opportunities, diversity, respect for people and non-discrimination (race, gender, language, religion, disability, sexual orientation, opinion, origin, economic position, birth, union membership or any other personal/social condition or circumstance) are basic principles of action for all the company's Professionals, as well as our Partners.