VAPT Specialist - Onsite Ortigas, Threat-Focused Testing

Indra Group USA

Manila

On-site

PHP 600,000 - 900,000

Full time

5 days ago

Be an early applicant

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

Indra Group USA seeks a skilled cybersecurity professional to perform vulnerability assessment and penetration testing across hosts, networks, web apps, APIs, source code, and mobile platforms. You will prepare comprehensive reports and present findings to stakeholders, supporting both cybersecurity and non-security teams.

Minimum 2.5 years in web/mobile VAPT with OWASP Top 10, plus familiarity with ICS/OT or DevOps is a plus.

Qualifications

Graduate with Bachelors degree in IT or other 4 years course.
At least 2.5 years of working experience on web and mobile application VAPT following the OWASP Top 10 testing framework.
Knowledge in ICS/OT or DevOps is a plus.
Experience with open source and commercial security testing tools like Kali Linux, Metasploit, Qualys, Nessus, BurpSuite, OWASP ZAP.
Knowledge of CVSS and CVE to identify vulnerabilities.
Ability to write assessment reports understandable by technical and non-technical audiences.
Certifications like CEH, CISSP are a plus but not required.

Responsibilities

Conducts vulnerability assessment and penetration testing (VAPT) across hosts, networks, web applications, APIs, source code, mobile apps, wireless devices, software and in-house applications, and cloud security.
Generates, documents, and submits VAPT reports and periodic reports; presents findings to stakeholders clearly.
Provides support to cybersecurity and non-cybersecurity teams during assessments.
Validates and tracks vulnerabilities until closure based on threat intelligence sources.
Participates in Threat Exposure and Attack Surface Management initiatives.