Penetration Tester

About the role

Manulife's Global Cybersecurity Services - Application Security is building a penetration testing Centre of Excellence to deliver penetration test capabilities across its business segments. As a Penetration Tester you will work closely with the business team and the second line of defense, assessing the scope and effort based on identified risks and executing engagements in line with common industry frameworks. The position is hybrid in Quezon City, Philippines.

Key responsibilities

• Evaluate the security posture of the organization, assessing threats and vulnerabilities in web applications, network security, microservices and mobile applications.
• Communicate the potential impact of a cyber attack to all relevant stakeholders.
• Evaluate security solutions and advise on the best way to protect the organization.
• Ensure alignment with corporate and regulatory information security requirements.
• Perform security assessments, develop security controls, policies and procedures, and conduct network scans and manual assessments including penetration testing and vulnerability scanning.
• Write reports with technical details, risk analysis and remediation recommendations.

Required profile

• At least 2 years of IT experience with hands-on penetration testing of external and internal networks, operating systems and web applications.
• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Systems or a related field.
• Willingness to work mid-shift and night-shift schedules on a hybrid setup in Quezon City.
• Fresh graduates of relevant courses are encouraged to apply.

Required skills

• Knowledge of current vulnerabilities, exploits and tools (VAPT, DAST, SAST and similar).
• Preferred: security certifications such as OSCP, OSCE, CEH, GWAPT, GPEN or eWPT, and exposure to security assessment frameworks.
• Manual and automated testing, and good communication and stakeholder management skills.