Junior VAPT Specialist

About Lennor Group

As a proud Filipino company, we are committed to providing world-class business and workforce solutions. Our deep market expertise, combined with a global perspective, empowers us to serve businesses of all sizes and industries efficiently

Our brand, Lennor Metier, is a leading recruitment agency and headhunting firm in the Philippines, partnering with reputable companies to source top talent for direct-hire opportunities. It specializes in IT, Finance, Engineering, Sales & Marketing, Supply Chain, HR, and Executive Search.

Job Title: Junior VAPT Specialist

Industry: BPO

Salary Range: up to ₱60,000

Work Setup: Onsite

Shift Schedule: Day Shift

Location: Ortigas

About The Role

The Junior VAPT Specialist is responsible for conducting comprehensive vulnerability assessments and penetration testing across various technology environments. The role will identify security weaknesses, validate vulnerabilities, provide actionable remediation recommendations, and support cybersecurity initiatives across the organization.

Key Responsibilities

• Generate, document, and submit VAPT reports, periodic reports, and other relevant documents
• Present the report findings to stakeholders in a clear and concise manner
• Provide support to other Cybersecurity and non-Cybersecurity groups in relation to vulnerability assessment and testing
• Perform validation and tracking until closure of vulnerabilities identified from different Threat Intelligence resources, monitor CVE, conduct zero-day analysis and cloud security
• Involvement with Threat Exposure and Attack Surface Management Team’s project initiatives.
  
  

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or another four-year related course.
• At least 1 year of hands-on experience in web and/or mobile application VAPT, penetration testing, or security research.
• Strong understanding of the OWASP Top 10 and its application in web application security testing.
• Knowledge of Industrial Control Systems (ICS), Operational Technology (OT), DevOps, or related technologies is highly preferred.
• Hands-on experience with open-source and commercial security testing tools such as:
• Kali Linux
• Metasploit
• Qualys
• Nessus
• Burp Suite
• OWASP ZAP
• Other vulnerability assessment and penetration testing tools
  

• Working knowledge of web and mobile application development and common application architectures.
• Ability to analyze technical vulnerabilities, assess their potential business impact, and recommend appropriate remediation measures.
• Strong technical documentation and report-writing skills, with the ability to communicate security findings clearly to both technical and non-technical audiences.
• Strong analytical, problem-solving, and communication skills.
• Cybersecurity certifications such as CEH, CISSP, or other relevant industry certifications are preferred.
  
  

• We kindly request your patience as we receive a significant number of applications. Rest assured that our team will update your application's status soon. In the meantime, we encourage you to follow our LinkedIn page to stay informed about future opportunities and company updates.