Pentester/Application Security

About KiotViet:
We are looking for some developers to join our product team. Joining us, you will have a chance to build the first marketplace in Vietnam with so much technology challenge. As a developer, you will be involved in building products to enable an excellent experience.
KiotViet wishes to transfer a massive power of technology to every business model in Vietnam and Southeast Asia through our simple and effective solutions. KiotViet is committed itself to creating efficient, convenient products for micro, small and medium- size businesses. In over 13 years, with more than 1500 people who form KiotViet in present, we understand that our members of all time are the foundation of KiotViet nowadays and a launchpad for reaching a better KiotViet in the future. KiotViet is committed to creating a work environment that shares success, shares responsibilities.
What you will do:
Collaborate with development teams to integrate and automate security testing into the software development process and to implement secure coding practices.
Conduct security assessments of software applications and products throughout the development lifecycle.
Stays current with the latest security threats and technologies.
Identify vulnerabilities and recommend appropriate security controls.
Consult and collaborate with the Architecture team on the security design of a new project.
Perform security code reviews and assist in remediating security flaws from internal testing as well as third- party penetration testing.
Coordinate with third- party firms to schedule periodic penetration testing to schedule and lead remediation efforts with development teams.

Programming experience with Java, JavaScript, and PHP, DotNet;
Experience working with one or more of the following: Burp Suite, OWASP ZAP;
Experience identifying web & mobile application vulnerabilities (e.g., OWASP) and mitigation of vulnerabilities;
Experience with security assessment tools and techniques (e.g., SAST, DAST);
Bachelor’s degree in computer science, Information Systems, or a related field.
Experience with threat modeling and risk assessment for applications;
Extensive experience penetration testing various assets, including but not limited to; web applications, mobile applications; networks/infrastructure, and cloud services;
Minimum three years of experience working application security concepts, secure coding practices and frameworks, and software development methodologies;
Preferred Skills:
Experience with Web Application Firewalls (WAF);
Certifications such as: OSCP, OSWE.

Unlimited chance of being promoted based on employee’s performance.
Advantageous and yield benefits, other benefits such as holiday vacations, benefits for employee’s relatives;
Performance bonus (up to 2- month salary);
Top salary range in the market (willing to negotiate);
Compensation, pay raise approval at least 1 time per year, a 13th month salary depending on employee’s performance;
Social – Health – Insurance paid fully. Healthcare: Annual health check- up, Premium Health Insurance ( from level senioraccording to the company&039;s regulations);

Cập nhật gần nhất lúc: 2024-08-28 06:35:02