{"id":3389897,"url":"https://alion.io/job/dysrupit-penetration-tester","title":"Penetration Tester","company":{"id":3809909,"name":"DysrupIT","domain":"dysrupit.com","url":"https://alion.io/company/dysrupit","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"BambooHR","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"part_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Makati, Philippines"],"countries":["PH"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Burp Suite","optional":false},{"name":"Frida","optional":false},{"name":"GCP","optional":false},{"name":"MobSF","optional":false},{"name":"Nmap","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP ASVS","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Postman","optional":false},{"name":"Python","optional":false},{"name":"SQLmap","optional":false}],"status":"live","first_seen_at":"2026-10-28T09:33:26Z","employer_posted_date":"2026-10-28","last_verified_at":"2026-11-04T20:48:45Z","board_verified":true,"closed_at":null,"days_open":7,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":7},"description":"JOB SUMMARY\nWe are looking for an Application Penetration Tester to assess web, mobile, and API-based applications for security weaknesses. You will plan and run tests, document findings clearly, and help engineering teams fix issues before attackers find them. You will work on engagements for Australian clients, so familiarity with local data protection and cyber compliance requirements is a strong advantage.\nJOB RESPONSIBILITIES\nPlan and carry out penetration tests on web applications, APIs, and mobile apps (black-box, grey-box, and white-box).\nFind and safely exploit vulnerabilities such as injection flaws, broken authentication and access control, business logic flaws, and insecure configurations.\nPerform manual testing alongside automated scanning, and validate results to remove false positives.\nWrite clear, accurate reports with risk ratings, proof of concept, business impact, and practical remediation steps.\nPresent findings to technical and non-technical stakeholders.\nRetest fixes and confirm that issues are closed.\nMap findings to relevant standards and client compliance obligations.\nSupport secure code review and threat modelling where needed.\nKeep up with new attack techniques, tools, and vulnerabilities.\nJOB QUALIFICATIONS:\n[3-5]+ years of hands-on application penetration testing experience.\nStrong knowledge of the OWASP Top 10, OWASP ASVS, and OWASP API Security Top 10.\nProficiency with Burp Suite and common testing tools (e.g., Nmap, SQLmap, Postman, Frida, MobSF).\nWorking knowledge of authentication and authorization standards (OAuth 2.0, OIDC, JWT, SAML).\nScripting ability in Python, Bash, or similar.\nUnderstanding of cloud environments (AWS, Azure, or GCP) and how they affect application security.\nStrong written English and report-writing skills.\nAbility to work independently and meet engagement deadlines.","description_format":"text","description_chars":1854,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","IT Consulting & Digital Transformation","Managed IT Services (MSP)","IT Staffing & Staff Augmentation"],"lifecycle":[{"event":"open","at":"2026-10-28T09:33:26Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":6,"expected_fill_days":29,"reasons":["conf:0","velocity","win:early"],"computed_at":"2026-11-04T06:34:25Z"},"pay":null,"html_url":"https://alion.io/job/dysrupit-penetration-tester","json_url":"https://alion.io/job/dysrupit-penetration-tester.json","meta":{"generated_at":"2026-11-04T23:46:24Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":783,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3809909},"rest":"https://alion.io/mcp/rest/get_company?id=3809909"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdysrupit-penetration-tester"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdysrupit-penetration-tester"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdysrupit-penetration-tester"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/dysrupit-penetration-tester\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdysrupit-penetration-tester"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3389897}},{"tool":"search_jobs","arguments":{"company":"dysrupit.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3389897},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}