VAPT Specialist — Onsite Cybersecurity Tester in Ortigas

Indra Group; Eastern Manila District; On-site; PHP 600,000 - 900,000; Full time

Job summary

Indra Group is seeking a VAPT Specialist for 100% onsite work in Ortigas, Philippines. The role involves conducting vulnerability assessments and penetration testing across diverse assets and reporting findings to stakeholders.

The ideal candidate will be able to monitor threats, track remediation, and collaborate with cybersecurity and non-cybersecurity teams to strengthen security postures.

Qualifications

• Experience in vulnerability assessment and penetration testing (VAPT).
• Ability to generate and present VAPT reports to stakeholders.
• Familiarity with threat intelligence resources and CVE monitoring.
• Knowledge of cloud security and vulnerability remediation processes.

Responsibilities

• Conduct VAPT across hosts, servers, workstations, network devices, web apps, APIs, source code, wireless devices, software applications, in-house apps, and security tools.
• Generate, document, and submit VAPT and periodic reports; present findings to stakeholders clearly.
• Provide support to cybersecurity and non-cybersecurity groups related to vulnerability assessment and testing.
• Validate and track vulnerabilities to closure; monitor CVE, perform zero-day analysis, and assess cloud security.
• Participate in Threat Exposure and Attack Surface Management Team initiatives.

Skills

Vulnerability Assessment

Penetration Testing

Report Writing

Stakeholder Communication

Threat Intelligence

Tools

Host/Server/Workstation

Network Device

Web Application

Web API

Source Code

Wireless Device

Software Application

In-house Application

Security Tool

Job description

Indra Group is seeking a VAPT Specialist for 100% onsite work in Ortigas, Philippines. The role involves conducting vulnerability assessments and penetration testing across diverse assets and reporting findings to stakeholders.

The ideal candidate will be able to monitor threats, track remediation, and collaborate with cybersecurity and non-cybersecurity teams to strengthen security postures.