Stop applying to remote jobs that are already dead.
Every listing shows the evidence: when we last checked it, how, and when it was posted and closed.

All listings

Dysrupit via BambooHR

Penetration Tester

Philippines Level not stated
still open verified 1d ago posted 5d ago seen 3h ago
Apply at dysrupit.bamboohr.com

This is the employer's own posting, not a copy on a job board.

What we know

Is it still open?

Confirmed still open

Last checked 1d ago — checked against the employer's own applicant tracking system, which is the company answering directly.

We re-read the employer's own applicant tracking system and the posting was still there. That is the company answering directly.

Check this listing's status as JSON

How old is it?

Posted 5d ago

The date the source published, not the day we noticed it (2026-10-28). Last seen at its source 3h ago.

We have tracked this listing since 28 Oct 2026 (4 days). The employer's own board has carried it every time we have read it, most recently 3 hours ago.

Is it remote?

Marked remote on the employer's board

Their board carries a remote setting on this posting — a field they filled in, not wording we read. The location field names somewhere specific, which is usually where the team or the entity sits.

Who may apply?

Philippines

The description states no restriction of its own. This is the source's own tag.

Skills named in the ad

AWSAzureBashCode ReviewGCPOWASPPenetration TestingPythonSSOScriptingThreat Modeling

Recognised terms only, from a fixed vocabulary — this is what CV matching compares against.

Carried by 1 source

The listing

JOB SUMMARY


We are looking for an Application Penetration Tester to assess web, mobile, and API-based applications for security weaknesses. You will plan and run tests, document findings clearly, and help engineering teams fix issues before attackers find them. You will work on engagements for Australian clients, so familiarity with local data protection and cyber compliance requirements is a strong advantage.

 

JOB RESPONSIBILITIES


  • Plan and carry out penetration tests on web applications, APIs, and mobile apps (black-box, grey-box, and white-box).
  • Find and safely exploit vulnerabilities such as injection flaws, broken authentication and access control, business logic flaws, and insecure configurations.
  • Perform manual testing alongside automated scanning, and validate results to remove false positives.
  • Write clear, accurate reports with risk ratings, proof of concept, business impact, and practical remediation steps.
  • Present findings to technical and non-technical stakeholders.
  • Retest fixes and confirm that issues are closed.
  • Map findings to relevant standards and client compliance obligations.
  • Support secure code review and threat modelling where needed.
  • Keep up with new attack techniques, tools, and vulnerabilities.

 JOB QUALIFICATIONS:

  • [3–5]+ years of hands-on application penetration testing experience.
  • Strong knowledge of the OWASP Top 10, OWASP ASVS, and OWASP API Security Top 10.
  • Proficiency with Burp Suite and common testing tools (e.g., Nmap, SQLmap, Postman, Frida, MobSF).
  • Working knowledge of authentication and authorization standards (OAuth 2.0, OIDC, JWT, SAML).
  • Scripting ability in Python, Bash, or similar.
  • Understanding of cloud environments (AWS, Azure, or GCP) and how they affect application security.
  • Strong written English and report-writing skills.
  • Ability to work independently and meet engagement deadlines.
Apply at dysrupit.bamboohr.com

At Dysrupit