14 дней назад
Penetration Tester (Middle/Senior) (Cybersecurity)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Penetration Tester (Middle/Senior) (Cybersecurity): Performing penetration tests and vulnerability assessments across web and mobile applications, networks, infrastructure, and cloud services with an accent on vulnerability triage, security methodologies, and technical reporting. Focus on defining assessment scopes, analyzing exploitation paths and remediation priorities, and communicating security risks to technical and non-technical stakeholders.
Location: Hanoi or Ho Chi Minh City, Vietnam
Company
is an independent technology consulting firm providing technology guidance and solutions to businesses through an international team operating across more than 60 countries.
What you will do
- Define security testing scopes with technical and business stakeholders across applications, infrastructure, and cloud environments.
- Perform penetration tests and vulnerability assessments on web and mobile applications, networks, infrastructure, and cloud services.
- Triage vulnerabilities by assessing exposure, exploitation paths, and remediation priorities.
- Conduct physical security reviews, security audits, and security policy analysis.
- Prepare technical reports, assessment summaries, and remediation recommendations for technical and non-technical audiences.
- Improve penetration testing methodologies, tools, and best practices while managing multiple assessments and deadlines.
Requirements
- Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related field.
- At least 3 years of experience as a Penetration Tester, Security Analyst, or Offensive Security professional in large-scale technical environments.
- Experience testing web applications, mobile applications, networks, infrastructure, and cloud services.
- Strong knowledge of manual and automated penetration testing techniques, security testing tools, and their potential impact on systems.
- Knowledge of AWS, Azure, Linux, Windows, mobile environments, OWASP Top 10, OSSTMM, and WAHH.
- Good communication in English and Vietnamese. Strong problem-solving, communication, attention-to-detail, and prioritization skills are required.
Nice to have
- Experience with microservices, web technologies, cloud-native environments, or large enterprise contexts such as banking.
- OSCP, CREST CRT, CREST CCT, or equivalent industry certification.
Culture & Benefits
- Competitive salary with a 13th-month salary.
- 14 or more annual leave days and premium healthcare insurance from the probation period.
- Regular project reviews, annual performance appraisals, and structured career growth opportunities.
- Technical workshops, internal and external training, team activities, sports clubs, and an annual company trip.
- International work environment with opportunities to work onsite in offices across more than 60 countries.
Hiring process
- Brief virtual or phone call.
- Approximately three interviews, varying according to seniority.
- Role-dependent case study, technical assessment, role play, or problem-solving exercise.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →