Penetration Tester (OWASPTop 10)

The position is based in Ho Chi Minh City. The role will report to the IT Governance & Security Manager, and handle the following responsibilities:
Own and conduct end- to- end penetration testing for the Company&039;s systems:

Perform security testing of web/mobile applications, networks, and operating systems.
Create a security report and provide applicable recommendations based on the test performed.
Provide summary reports that will help the board of management team understand the company&039;s security posture.
Conduct attack exploitation using manual penetration testing (MPT) and automatic tools according to the security test plan and checklist.

Join the Incident Response Team:

Collaborate with other IT teams and user departments to handle information security incidents, analyze application logs, security logs, trace root causes, detect actors, propose solutions to prevent attacks, and develop best practices to enhance security systems.

Participate in the projects:

Security solutions implementation or enhancement projects: analyze and develop security protection requirements; evaluate the proposal; validate the deliveries; etc.
External partners for independent security assessment: propose the scope of services; understand and verify the findings in penetration testing projects; etc.

Self- development:

Perform other tasks as required by the manager.
Research and self- improve on new attack exploitation methods and appropriate security standards.

Other tasks assigned by superiors

Yêu cầu công việc

Graduated from a university or higher education, major in computer science.
In- depth knowledge of penetration testing tools and common vulnerabilities.
Honesty, meticulous, careful, enthusiastic and high sense of responsibility at work.
While Vietnamese communication skills are essential, this position also requires good English communication skills (both written and spoken) in the workplace.
Ability to present the security penetration testing report (in English and Vietnamese) and explain it to the technical team, while ensuring that the summary section is understandable by the business management team.
Have 3 years of experience in testing OWASPTop 10, web applications, mobile applications, APIs, network penetration testing, and performing as a red team member.
Ability to read and analyze system, database, and application logs.
The candidate possessing any or some of the following expertise is a plus:

International security certificates such as CEH, OSCP, etc.
Proficiency in web application programming languages (C, PHP, Python).
Experience in source code review. d) Proficiency in programming scripts to perform security testing.
Experience in a cyber incident response team.

Practice in HackTheBox lab environment, Portswigger, or participation in CTF programs, bug bounty, etc

Participate in all insurances (social insurance, health insurance, unemployment insurance), enjoy full policies and regimes according to the Labor Law.
Holidays and full annual leave in accordance with State regulations.
13th month salary.
Dynamic and humane working environment Annual trip.

Cập nhật gần nhất lúc: 2024-04-03 12:07:32