Plus
Enable Plus
Back
Company hidden
updated 24 days ago

Penetration Testing Analyst (Cybersecurity)

Work format
onsite
Work type
fulltime
Grade
middle
English
b2
Country
Philippines
This vacancy is from Hirify.Global listVacancy from Hirify Global, list of international tech companies
Plus is required to make matches and apply

Match & Cover letter

Plus required for matching with this vacancy

Job description

Text:
/
TL;DR
Penetration Testing Analyst (Cybersecurity): Performing hands-on web, API, mobile, and infrastructure penetration testing with an accent on manual vulnerability discovery, exploitation, risk assessment, and remediation reporting. Focus on researching attack techniques, mapping attack paths, validating fixes, and supporting foundational Red Team activities including reconnaissance, initial access, privilege escalation, and lateral movement awareness.

Location: Taguig City, National Capital Region (Manila), Philippines

Company

hirify.global helps clients achieve lifetime financial security and live healthier lives through financial and insurance-related services.

What you will do

  • Perform web, API, mobile, and infrastructure penetration testing across enterprise applications.
  • Identify, exploit, and validate vulnerabilities through manual testing and industry tools.
  • Conduct testing according to OWASP and established security methodologies.
  • Prepare structured reports covering root causes, business impact, risk ratings, and remediation recommendations.
  • Research vulnerabilities, exploits, and attack techniques, and perform retesting to validate remediation.
  • Support reconnaissance, attack-surface mapping, attack-path documentation, and foundational Red Team activities.

Requirements

  • At least 2 years of hands-on experience in web application security testing, API security testing, and basic network or infrastructure testing.
  • Strong understanding of authentication, session management, access control, input validation, and injection vulnerabilities.
  • Experience with Burp Suite, Nmap, sqlmap, or similar security testing tools.
  • Ability to perform manual testing beyond automated scanning and clearly document security risks.
  • Bachelor's degree in Computer Science, Information Security, or a related field.
  • Basic understanding of adversary simulation, reconnaissance, initial compromise, privilege escalation, lateral movement, and enterprise attack paths.

Nice to have

  • OSCP, OSWA, CISSP, CompTIA, or similar certification.
  • Interest in developing broader Red Team and offensive security capabilities.

Culture & Benefits

  • Collaborative environment with colleagues who share technical knowledge.
  • Support from leaders focused on professional growth and development.
  • Opportunities to contribute to security work that protects clients and communities.

Be careful: if the employer asks you to log into their system using iCloud/Google, send codes/passwords, or run code/software, don't do it - these are scammers. Always click "Report" or contact support. More in guide →