Junior Penetration Tester | Purple Team  

1. Vulnerability Assessment and Penetration Testing

• Plan and execute Vulnerability Assessment (VA), Vulnerability Management (VM), Vulnerability Assessment and Penetration Testing (VAPT), Phishing Simulation, and Red Teaming activities.
• Evaluate the effectiveness of existing security controls and provide recommendations for improvements.
• Simulate real-world cyber-attacks to identify potential weaknesses.
• Prepare detailed reports on findings, and recommended remediation strategies.
• Communicate findings to technical and non-technical stakeholders in a clear and understandable manner.
• Work closely with cross-functional teams to integrate security best practices into development and operational processes.
• Collaborate with IT teams, developers, and system administrators to address and resolve security issues.
• Stay informed about the latest security threats, vulnerabilities, and industry best practices.

1. Digital Forensics and Incident Response

• Assist in conducting digital forensics investigations on various digital devices, including computers, servers, mobile devices, and network equipment.
• Utilize industry-standard forensic tools and techniques to acquire, analyze, and preserve digital evidence.
• Coordinate incident response efforts during cybersecurity incidents, including data breaches, malware infections, and unauthorized access.
• Implement incident response plans to contain and eradicate security incidents effectively.
• Collaborate with cross-functional teams to minimize the impact of incidents, providing guidance on corrective actions.
• Prepare detailed and well-documented reports outlining findings, methodologies, and recommendations.
• Contribute to post-incident reports, sharing insights and lessons learned for continuous improvement.

C. Other responbilities

• Ensure the execution of services within the allocated budget hours or parameters defined by the Service Level Agreement.
• Obtain professional certifications and actively participate in relevant training sessions related to the provided services.
• Deliver high-quality services to clients with the goal of ensuring customer satisfaction.

A. Minimum Education

• College Graduate or Diploma holder of any computer-related course.
• Preferably a degree in Information Technology, Engineering, or a related field.

B. Minimum Experience/Training

• 1 years+ experience working in Vulnerability Assessment and Penetration Testing, Red Teaming OR Security Operations particularly in Digital Forensics and Incident Response.
• Knowledge of ITIL, Infrastructure related technologies & understanding of business relevance of the technologies
• Experience working with IT systems and software related to Vulnerability Assessment and Penetration Testing, and Digital Forensics and Incident Response.

C. Training and Certifications (is a plus)

• CompTIA Network+, Security+
• EC-Council CEH, ECIH, CHFI, CSA, CTIA, ECSA, LPT, CPENT
• eLearnSecurity eJPT, eCPPT, eCPTx, eWAPT, eMAPT, eCIR, eCDFP,
• any other related certifications

D. Working Conditions

• Probationary for 6 months
• Reporting to the company’s main office in Makati City on a hybrid work arrangement.
• Shifting schedule.
• Collaborate physically and/or virtually with internal and external stakeholders.
• May travel for face-to-face client meetings/incident response, company-sponsored conferences, and related marketing events.
• Attend training and acquire certifications that are applicable to the role.