Lead Java Engineer

Lead Penetration Tester

Ho Chi Minh, Ha Noi - Viet Nam

Outsource

#Hands-on Penetration Testing Perform authorized penetration testing for web applications, mobile applications, APIs, infrastructure, cloud environments, and digital platforms. Identify, validate, exploit where appropriate, and document security vulnerabilities, including authentication, authorization, session management, input validation, encryption, access control, and business logic issues. Conduct security assessments based on industry standards such as OWASP Top 10, OWASP API Security Top 10, OWASP Mobile Security Testing Guide, and relevant security practices. Analyze application flows, user journeys, transaction processes, access controls, and data handling mechanisms to identify potential security risks. Perform vulnerability assessment and manual verification to reduce false positives and confirm actual exploitability in authorized environments. Conduct retesting activities to validate remediation effectiveness and ensure vulnerabilities are properly resolved. Support security testing activities within the SDLC, including security requirement review, threat analysis, test planning, and release security validation. Stay updated with emerging cyber threats, attack techniques, security risks, and security testing best practices.#Technical Leadership & Delivery Support Lead the planning, scoping, and execution of penetration testing activities across assigned projects or workstreams. Define penetration testing approach, test strategy, testing scope, priorities, timelines, and required evidence based on project and client requirements. Guide and mentor penetration testers or security engineers in testing methodology, vulnerability validation, reporting quality, and remediation discussions. Review vulnerability findings, risk ratings, evidence, and remediation recommendations to ensure accuracy, consistency, and practical value. Act as the main technical point of contact for penetration testing activities, working with client stakeholders, security teams, development teams, DevOps, infrastructure teams, and compliance teams. Facilitate vulnerability walkthroughs, risk clarification sessions, remediation discussions, and retesting alignment with relevant stakeholders. Support estimation, planning, status tracking, issue escalation, and delivery reporting for security testing activities. Contribute to improving security testing processes, reporting templates, testing checklists, knowledge sharing, and reusable testing practices. Support regulatory, audit, and compliance requirements by providing security testing evidence, reports, remediation status, and technical clarification when needed.

Negotiation

Embedded Linux Middleware Engineer

Ho Chi Minh - Viet Nam

Outsource

Design, develop, and test middleware/framework for SoC platforms. Perform Integration Testing, Unit Testing, Functional Testing. Prepare technical documentation and develop sample applications for the product. Collaborate with different teams to ensure successful project delivery. Identify, report, and resolve technical issues

Negotiation

Solution Designer (Merchant Services)

Ho Chi Minh - Viet Nam

Product

• Java
• NodeJS

Evaluate business requirements and COM systems to develop high-quality solutions that integrate technical sophistication, security, scalability, and business value. Produce comprehensive design materials, architectural charts, and technical documentation for implementation teams. Utilize systems thinking and design thinking approaches to assess the impact on the COM ecosystem. Execute proof-of-concept projects as needed to validate architectural decisions and mitigate implementation risks. Effectively communicate intricate technical concepts and design choices to a wide range of stakeholders, including technology heads, engineering managers, product owners, tech leads, testing teams, and technology executives. Act as a reliable advisor capable of bridging the gap between business and technical spheres. Advocate for platform-focused principles by creating adaptable and reusable solutions that promote consistency and effectiveness throughout the organization. Offer strategic insight to Technology Leadership on architectural direction, technical debt, and platform development.

Negotiation