Penetration Tester

Job not on LinkedIn

🔥 0 minutes ago

🇵🇭 Philippines – Remote

⏱ Part Time

🟡 Mid-level

🟠 Senior

🔧 QA Engineer (Quality Assurance)

👻 Ghost score 13%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

DysrupIT

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2016

🏢 Enterprise

☁️ SaaS

🔒 Cybersecurity

Enterprise • SaaS • Cybersecurity

DysrupIT is a global cloud services and IT solutions firm that helps organizations adopt cloud technologies and transition to as-a-Service business models. The company provides enterprise cloud, managed services, application engineering, cybersecurity, and data analytics & information management, serving SMBs through multinational enterprises with Microsoft and other cloud platforms. DysrupIT also emphasizes community impact, talent development, and long-term partnerships to deliver secure, scalable, and business-aligned technology outcomes.

📋 Description

• Plan and carry out penetration tests on web applications, APIs, and mobile apps using black-box, grey-box, and white-box methods • Find and safely exploit vulnerabilities such as injection flaws, broken authentication and access control, business logic flaws, and insecure configurations • Perform manual testing alongside automated scanning and validate results to remove false positives • Write clear, accurate reports with risk ratings, proof of concept, business impact, and practical remediation steps • Present findings to technical and non-technical stakeholders • Retest fixes and confirm that issues are closed • Map findings to relevant standards and client compliance obligations • Support secure code review and threat modelling where needed • Keep up with new attack techniques, tools, and vulnerabilities • Work on engagements for Australian clients

🎯 Requirements

• [3–5]+ years of hands-on application penetration testing experience • Strong knowledge of the OWASP Top 10, OWASP ASVS, and OWASP API Security Top 10 • Proficiency with Burp Suite and common testing tools (e.g., Nmap, SQLmap, Postman, Frida, MobSF) • Working knowledge of authentication and authorization standards (OAuth 2.0, OIDC, JWT, SAML) • Scripting ability in Python, Bash, or similar • Understanding of cloud environments (AWS, Azure, or GCP) and how they affect application security • Strong written English and report-writing skills • Ability to work independently and meet engagement deadlines • Familiarity with Australian local data protection and cyber compliance requirements is a strong advantage

🏖️ Benefits

• Part-time employment