Penetration Tester (Web Application)

ABOUT CLIENT

Our client is using new technology to develop products for the banking industry

JOB DESCRIPTION

Be skilled in conducting advanced manual application penetration tests.
Capable of developing tools and internal applications for discovering, assessing, and mitigating security vulnerabilities in both development and production stages.
Engage in design, source code review, and testing of new application security features and controls across various products.
Automate security penetration testing cases and ensure deployment in a production environment.
Advocate for secure development practices for software engineers.
Research and provide recommendations to the development team regarding security standards.
Continuously upgrade personal knowledge of information security to remain at the forefront of the field.

JOB REQUIREMENT

A bachelor's degree in Computer Science, Computer Engineering, Information Systems, or a related field, or 3+ years of equivalent work experience is required.
Familiarity with methods, processes, and procedures for conducting penetration testing.
Strong understanding of web application development.
Experience in reviewing source code (Java, Python) and mobile applications (Native, KMM).
Proficiency in cloud security (AWS).
Knowledge of web and mobile application security principles, including understanding of application security topics such as OWASP Top 10 and authentication infrastructure (SAML, OAUTH).
Experience in planning, coordinating, executing, and reporting security tasks.
Strong communication skills with the ability to explain complex technical issues to non-technical business users.
Possession of security-related certifications like GWAPT/ OSWE, etc. will be an advantage.

WHAT'S ON OFFER

Company offers meal and parking benefits.
Full benefits and probationary salary provided.
Insurance coverage as per Vietnamese labor law and premium health care for employees and their families.
Work environment is values-driven, international, and agile in nature.
Opportunities for overseas travel related to training and work.
Participation in internal Hackathons and company events such as team building, coffee runs, and blue card activities.
Additional benefits include a 13th-month salary and performance bonuses.
Employees receive 15 days of annual leave and 3 days of sick leave per year.
Work-life balance with a 40-hour workweek from Monday to Friday.

CONTACT

PEGASI – IT Recruitment Consultancy | Email: recruit@pegasi.com.vn | Tel: +84 28 3622 8666
We are PEGASI – IT Recruitment Consultancy in Vietnam. If you are looking for new opportunity for your career path, kindly visit our website www.pegasi.com.vn for your reference. Thank you!

Job Summary

Company Type:

Product

Technical Skills:

Security, AWS

Location:

Ho Chi Minh - Viet Nam

Working Policy:

Hybrid

Job ID:

J00142

Status:

Close

Related Job:

Technical Lead FE Web

Ho Chi Minh - Viet Nam

Outsource

  • Frontend
  • NextJS
  • ReactJS
  • Typescript

The Technology Lead bridges business objectives with technical execution. They provide guidance on technology stacks, roadmaps, and business development while ensuring scalable and future-proof solutions. By leading teams with Lean and Agile principles, they optimize workflows, mentor engineers, and uphold high coding standards. Their role ensures project success through proactive risk management, seamless collaboration, and on-time delivery of high-quality web applications.#Key responsibilities: Perform technical requirements gathering, use-case discovery, and platform analysis Generate convincing and substantiated technology and architecture recommendations Develop and maintain software requirements specification and architecture documents Serve as the primary day-to-day technical contact for Clients, third-party vendors, technology partners and internal project stakeholders Collaborate with Technology Directors to develop estimates and overall implementation solution plans Serve as the lead for all implementation, customization, and integration efforts Define and document best practices and contribute to company knowledge sharing efforts Identify and define integration points with third-party solutions Define and document all tools and technologies used to implement the solution Work with vendor services to provide elements related to technology selection and implementation Perform problem analysis (identify root causes, outline resolution options, and take appropriate actions to resolve problems) Prepare and deliver technical proposals and presentations to all levels of a client's organization Evaluate vendor documentation and technical requirements to accurately estimate time and cost of identified options in order to make recommendations on approach from the business perspective

Negotiation

View details

Embedded Software Engineer (Application Software (ASW), Chinese Speaking)

Ho Chi Minh, Ha Noi - Viet Nam

Outsource

  • Embedded
  • C/C++

Analyze customer function requirements Translate them into detailed specifications for CRPs Design solutions aligned with customer needs and implemented ASW software using ASCET Conduct verification activities, including unit and component testing, for each release cycle Integrat calibration parameters to optimize function performance and efficiency Evaluate vehicle test results to ensure compliance with performance standards Investigate and resolve issues reported by stakeholders such as APP, TPM, and customers

Negotiation

View details

Senior Devops Engineer

Ho Chi Minh - Viet Nam

Outsource

  • Devops
  • AWS

Create, implement, and oversee scalable cloud infrastructure utilizing AWS services such as EC2, ECS, EKS, S3, and IAM. Automate infrastructure provisioning through Terraform and uphold infrastructure-as-code best practices. Establish and maintain CI/CD pipelines using Jenkins, Harness, and similar tools. Manage containerized applications employing Docker, EKS, and ECS. Author robust and reusable Python and Shell scripts for automating routine tasks and system operations. Integrate observability and logging utilizing tools like Splunk and OpenSearch. Work with development teams to seamlessly integrate and deploy microservices. Ensure system security, performance tuning, and adherence to enterprise standards. Participate in on-call rotations and respond to incidents.

Negotiation

View details