Security Bank

About Security Bank
We are the Philippines’ largest independent bank, having won countless awards over the years including the most prestigious industry award in both 2015 and 2016—the Bank of the Year – Philippines by The Banker.
We’re changing how people bank. From the moment customers enter our branches to their experience online, we make them feel valued and empowered.
Now, with more than 300 branches spanning the country, BetterBanking has become the gold standard in improving the banking lives of millions of Filipinos. But we’re far from done.
In our constant pursuit of excellence and improvement, we create teams that support our business and each other.
The Role
As an IT - Vulnerability Manager, you will be responsible for ensuring that the regular vulnerability assessment and penetration testing are conducted on regular basis. You will ensure that their identified vulnerabilities are accounted for and resolved within the agreed time frame.
How you'll contribute
<ul>
<li>Conducts vulnerability assessment and penetration testing based on the scope and agreed timeline.</li>
<li>Identifies critical flaws in applications and systems that attackers could exploit.</li>
<li>Participates as Subject Matter Expert (SME) and provides a consultative recommendation in discussion related to Vulnerability Assessment and Penetration Testing</li>
<li>Regular interaction with the IT Vulnerability Management Team to understand the new technology and scanning process.</li>
<li>Uses automated tools to pinpoint vulnerabilities, exploit and reduce time-consuming tasks.</li>
<li>Configures the vulnerability scanner and ensures that scans are scheduled and performed accordingly.</li>
<li>Uses manual testing techniques and methods to gain a better understanding of the environment and reduce false negatives.</li>
<li>Develops, tests, and modifies custom scripts and applications for security vulnerability testing.</li>
<li>Ensures that all vulnerability findings are attended to and acted by remediating team/platform owners.</li>
<li>Coordinates with Patch Manager and other concerned units their identified vulnerabilities to ensure the findings are assessed, accepted, or mitigated.</li>
<li>Coordinates with Network Operations Center (NOC), Incident Response Team (IRT), Security Operations Center (SOC), and other units on matters related to cybersecurity incidents due to unknown or identified vulnerability.</li>
<li>Maintains an inventory of their identified vulnerabilities and monitors status and actions taken to address the weakness.</li>
<li>Creates and submits comprehensive VAPT reports to remediating team/platform owners on regular basis.</li>
<li> Assists on VAPT requirements to support project delivery</li>
</ul>
What we’re looking for:
<ul>
<li>Bachelor's Degree in Business Management or related majors</li>
<li>Preferably with certifications in any of the following: Security+, Pen Tester, Vulnerability Assessor</li>
<li>At least 5 years of experience in Vulnerability Assessment and Penetration Testing</li>
<li>A high degree of organizational &amp; analytical skills.</li>
<li>Flexible and capable of taking multiple tasks and meet tight deadlines</li>
<li>Self-motivated and result-oriented, driving projects to meet the designated schedule</li>
<li>Excellent interpersonal communication &amp; presentation skills.</li>
<li>Proficient in both oral &amp; written communication.</li>
<li>Knowledge of IT Operations, IT Network/Infrastructure, Information Security, Business Continuity Management, Vulnerability Management, Risk Management.</li>
<li>Experience with various operating systems including Windows, Linux, and Unix</li>
<li>Experience with various security tools and products (Nessus, Qualys, Metasploit, Burp Suite, Core Impact, etc.)</li>
<li>Understanding of Security and Infrastructure Architecture/Technologies: including but not limited to Routers, Firewalls, IDS, VPN, Multi/Two Factor Authentication, Identity Management, Data Leak Prevention, Encryption, Application Security, Vulnerability Scanners, Penetration Testing, Windows and Unix Systems Security.</li>
<li>Ability to scrutinize complex and diverse information and transform details and facts into recommendations and action plans.</li>
<li>Knowledge of NVD and CVSS scoring</li>
<li>Excellent understanding of Vulnerability Assessment and Penetration Testing Lifecycle</li>
</ul>
#LI-MY1
#LI-Hybrid

Makati

IT - Vulnerability Manager

SonicWall

This is a very visible position responsible for all aspects of the SonicWALL Security products. We are looking for a Security Analyst to perform on-going vulnerability assessment and penetration testing of the SonicWALL security products and internal backend network. Serving as a member of the Security Assessment Test Team (SATT) responsible for improving the overall security posture of the enterprise network. The Security Analyst will run periodic scans, identify vulnerabilities, develop test plans for exploiting vulnerabilities in a controlled environment, perform penetration testing, document results, investigate and propose mitigations for identified vulnerabilities, and work with team members as to mitigate the identified vulnerabilities. 
The Security Analyst will also serve as an escalation point for addressing any threats identified by the enterprise security tools and processes. 
Desired Skills &amp; ExperienceResponsibilities:    Perform research, analysis, and testing of network, application, physical and procedural vulnerabilities via vulnerability assessment, penetration test and/or social engineering.    Perform vulnerability scanning of SonicWall products, workstations, servers, and appliances in the backend network.     Perform internal vulnerability assessments and penetration tests prior to external audits     Clearly outline and portray test findings via well documented reports    Review IDS and or firewall signature / rule sets and make recommendations for improvement    Acquire a comprehensive technical understanding of all products in the SonicWALL product line and the underlying hardware/software technologies within the solution stack to enable technical leadership through the analysis stage to resolution of issues    Work with other team members to respond to any alerts and/or threats identified by the security tools and processes.     Identify, research, and assist in the implementation of any security tools and/or processes to improve the overall security posture    Maintain up-to-date detailed knowledge of the IT security threats and plan, prioritize, and implement, mitigation controls as necessary      Review logs and reports of all in-place devices, whether they be under direct control (i.e., security tools) or not (i.e., workstations, servers, network devices, etc.). Interpret the implications of that activity and devise plans for appropriate resolution.     Participate in investigations into problematic activity.     Experience or familiarity with securing Microsoft SQL databases and IIS web services     Working technical knowledge of vulnerability scanning and remediation, traffic monitoring, and log analysis     Provide on-call support if necessary for all in-place security solutions     Perform other duties as assignedRequired Qualifications:
    10 or more years of overall experience in the information security field    College diploma or university degree in the field of computers or engineering and/or 6 years equivalent work experience     Pen Tester, Penetration Tester, Spirent, BreakingPoint, KeySight, vulnerabilities, GPEN, Nmap, Nessus, Metasploit, Securityforest Exploitation framework, CORE IMPACT, testing, security     5+ years’ experience of Professional Web-Application Development or Source Code Review (C/C++, C#, VB.NET, ASP, PHP, and Java)    Knowledge of web architecture and protocols (HTTP(S), TCP/IP, ARP, SMTP, DNS, etc.)    Must understand how data flows through an application and connected components (SMTP, LDAP, Database servers) and common software security issues and remediation techniques     Proven analytical skills and technical competence, ideally in a manager or team lead    Microsoft Certified Systems Administrator: Security    Certified Ethical Hacker (CEH) Knowledge &amp; Experience     Strong people manager and motivator, with strong team coaching and people development skills    Ability to present ideas in business-friendly and user-friendly language.    Highly self-motivated and directed.    Keen attention to detail.     Team-oriented and skilled in working within a collaborative environment.     Demonstrable presentation skills    Strong communicator    Self-starter, motivated and positive    Strong hands on leader


#LI-AK2 Abha

Poland

Penetration Testing Principal Engineer - Remote

Apply to Core Impact Cyber Security Jobs in companies remotely and near you. New Core Impact Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
IT - Vulnerability Manager at Security Bank	Banking Burp Suite Core Impact Encryption Exploit
Penetration Testing Principal Engineer - Remote at SonicWall	Audits C CEH Core Impact DNS

Core Impact Cyber Security Jobs

0 Core Impact Cyber Security Jobs. Page 1 of 1

2 closed core impact cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Core Impact Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Core Impact Cyber Security Jobs

0 Core Impact Cyber Security Jobs. Page 1 of 1

2 closed core impact cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Core Impact Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter