VAPT Specialist: Offensive Security & Threat Discovery

Indra Philippines, Inc.; Metro Manila; On-site; PHP 600,000 - 900,000; Full time

Benefits offered by this job

Open University access

Udemy for Business access

Flexible benefits package

Job summary

Indra Philippines, Inc. is seeking a cybersecurity professional to conduct comprehensive vulnerability assessment and penetration testing across web, mobile, and other environments.

You will document findings, present to stakeholders, and assist multiple teams in vulnerability handling. The role emphasizes collaboration, understanding of OWASP Top 10, and producing clear, actionable reports for both technical and non-technical audiences.

Qualifications

• Bachelor's degree in IT or related field.
• At least 1 year experience in web and mobile application VAPT or security research.
• Experience with Kali Linux, Metasploit, Qualys, Nessus, BurpSuite, OWASP ZAP, etc.
• Ability to write assessment reports that are understandable to technical and non-technical audiences.
• Preferably with Cybersecurity certifications like CEH, CISSP, etc.

Responsibilities

• Perform vulnerability assessment and penetration testing on web, mobile, and other targets.
• Document and present VAPT findings to stakeholders clearly.
• Provide support to Cybersecurity and other groups in relation to vulnerability assessment.
• Perform validation and tracking until closure of vulnerabilities using Threat Intelligence resources and CVE monitoring.
• Engage with Threat Exposure and Attack Surface Management team initiatives.

Skills

VAPT experience

OWASP Top 10

Report writing

Security collaboration

Education

Bachelor's degree in IT or related field

Tools

Kali Linux

Metasploit

Qualys

Nessus

BurpSuite

OWASP ZAP

Job description

Indra Philippines, Inc. is seeking a cybersecurity professional to conduct comprehensive vulnerability assessment and penetration testing across web, mobile, and other environments.

You will document findings, present to stakeholders, and assist multiple teams in vulnerability handling. The role emphasizes collaboration, understanding of OWASP Top 10, and producing clear, actionable reports for both technical and non-technical audiences.