Vulnerability & Pen Testing Lead

SM Investments; Philippines; On-site; PHP 900,000 - 1,300,000; Full time

Job summary

SM Investments is seeking a skilled Cyber Security Vulnerability professional to lead vulnerability management and remediation across the organization. You will drive assessments, automation, threat monitoring, and risk analysis to ensure a secure, compliant environment.

You will manage daily vulnerability scanning, analyze results, and coordinate remediation while supporting policy compliance and security records. Development experience and security certifications are a plus.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related field.
• 5+ years of relevant experience in cybersecurity, vulnerability management, or related area.
• Strong understanding of security principles, vulnerability management, and risk analysis.
• Familiarity with VA tools, threat intelligence, and automation.
• Excellent communication, analytical, and problem-solving skills.

Responsibilities

• Lead vulnerability scanning and onboarding for infrastructure and applications.
• Analyze scan results, prepare reports, and coordinate remediation.
• Conduct policy compliance scans and maintain security records.
• Identify opportunities to automate security processes and develop automation initiatives.
• Manage policy configuration, firewall reviews, and password audits; coordinate remediation across teams.

Skills

Security principles

Vulnerability management

Risk analysis

Communication

Analytical thinking

Problem solving

Development experience

Certifications (CISSP,CISM,CEH)

Education

Bachelor’s degree in Computer Science or Information Security

Tools

Snyk

WAF

Job description

SM Investments is seeking a skilled Cyber Security Vulnerability professional to lead vulnerability management and remediation across the organization. You will drive assessments, automation, threat monitoring, and risk analysis to ensure a secure, compliant environment.

You will manage daily vulnerability scanning, analyze results, and coordinate remediation while supporting policy compliance and security records. Development experience and security certifications are a plus.