Vulnerability Assessment and Penetration Testing Lead

SM Investments; Philippines; On-site; PHP 900,000 - 1,300,000; Full time

Job summary

SM Investments is seeking a skilled Cyber Security Vulnerability professional to lead vulnerability management and remediation across the organization. You will drive assessments, automation, threat monitoring, and risk analysis to ensure a secure, compliant environment.

You will manage daily vulnerability scanning, analyze results, and coordinate remediation while supporting policy compliance and security records. Development experience and security certifications are a plus.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related field.
• 5+ years of relevant experience in cybersecurity, vulnerability management, or related area.
• Strong understanding of security principles, vulnerability management, and risk analysis.
• Familiarity with VA tools, threat intelligence, and automation.
• Excellent communication, analytical, and problem-solving skills.

Responsibilities

• Lead vulnerability scanning and onboarding for infrastructure and applications.
• Analyze scan results, prepare reports, and coordinate remediation.
• Conduct policy compliance scans and maintain security records.
• Identify opportunities to automate security processes and develop automation initiatives.
• Manage policy configuration, firewall reviews, and password audits; coordinate remediation across teams.

Skills

Security principles

Vulnerability management

Risk analysis

Communication

Analytical thinking

Problem solving

Development experience

Certifications (CISSP,CISM,CEH)

Education

Bachelor’s degree in Computer Science or Information Security

Tools

Snyk

WAF

Job description

At SM Investments, we shape sustainable growth stories that uplift industries and communities. Join one of the Philippines’ leading conglomerates and help safeguard a dynamic ecosystem of retail, banking, and property businesses.

About the Role

We’re looking for a highly motivated Cyber Security Vulnerability professional who will lead vulnerability management and remediation efforts across our organization. You will drive assessments, automation, threat monitoring, and risk analysis to ensure a secure and compliant environment.

What You’ll Do:

Vulnerability & Compliance Management

• Lead daily infrastructure and application vulnerability scanning and onboarding
• Analyze scan results, prepare reports, and coordinate timely remediation
• Conduct policy compliance scans and maintain updated security records

Automation & Feasibility

• Identify opportunities to automate security processes
• Develop and improve automation initiatives
• Perform feasibility studies for new security measures
• Track daily threat intel, bulletins, and industry trends
• Handle risk assessments for new apps, architectures, and exemption requests (WAF, Snyk, whitelisting, etc.)
• Provide recommendations to mitigate identified risks

Periodic Security Operations

• Manage policy configuration, onboarding, firewall rule reviews, and password audits
• Coordinate remediation activities across teams

What We’re Looking For

• Bachelor’s degree in Computer Science, Information Security, or related field
• At least 5 years of relevant experience
• Strong understanding of security principles, vulnerability management, and risk analysis
• Familiarity with VA tools, threat intelligence, and automation
• Excellent communication, analytical, and problem-solving skills
• Development experience is an advantage
• Security certifications (CISSP, CISM, CEH) are a plus

Why Join Us?

Be part of a team that protects the digital backbone of one of the country’s largest and most influential conglomerates. If you’re passionate about security, continuous improvement, and high-impact work — we’d love to meet you.