Lead Pen Tester

We are seeking motivated Lead Pen Tester (Group Security) to be part of a team that evaluates a wide range of Our client's products and services - to identify security weaknesses and exposures that pose a risk to the enterprise, and work with teams to understand their risk and path to remediation.

Execute penetration tests, either in a team or individually, to identify vulnerabilitiesand weaknesses that could impact bank systems;

Triage vulnerabilities and justify risk in alignment with common vulnerability scoringsystems, considering the environment and context;

Report testing results to key project stakeholders in varying formats (i.e. traditionalreport, bug tickets), including verbal communication;

Work with larger technical programs across the bank to understand and constructtesting requirements;

Where required, work as an embedded penetration tester on large programs;

Assist with other offensive security activities within the team

Self-manage security testing projects from end-to-end;

Participate in 'run the business' activities, such as maintenance and uplift of thepenetration testing environment.

Maintains and increases motivation within team by regularly checking in onmotivation levels, and making adjustments quickly where needed (e.g. QCI, teammeeting, team engagement activity).

Creates and maintains an equally safe environment for all members of team to 'test and learn', share learning, challenge thinking, team development and explore new ideas.

Sets effective and meaningful goals and timelines for each team member that supports them to achieve beyond what is expected (e.g. align with Peak performance framework).

Provides input to Engineering Manager in making decision of Prioritising and ensuringresources for the right work and making trade-offs between current and futureperformance to balance immediate goals with longer-term growth for the team.

Supports the team to cut through complexity and create clarity by simplifyingpractices and processes.

Be responsible for team engagement & relations.

8+ years of experience in IT/Security industry, and at least 3 years as a penetration tester;

Experience testing various technologies and platforms, including but not limited to; Web applications, web APIs, mobile applications (iOS, Android), network and server technologies, cloud services (AWS, Azure), and hardware;

Experience writing and conveying complex security findings through reports;

A comprehensive understanding of Penetration Testing frameworks and methodologies (OWASP, OSSTMM, WAHH);

Methodical, analytical approach with outstanding attention to detail. The ability to construct and execute testing within a controlled environment that complies with methodologies, policies, and best practice;

A clear understanding of both manual and automated penetration testing techniques, including knowledge of common penetration testing tools and the impacts they have on systems;

A good understanding of risk mitigation strategies when working in highly sensitiveenvironment;

Proven ability to work both individually and within a team environment (at times with little guidance), build strong relationships and maintain rapport with internal Our Client's stakeholders and 3rd party service providers;

Strong team working skills are essential;

Excellent verbal and written communication skills;

Ability to attend to the detail on multiple concurrent tasks while meeting variousdeadlines;

Ability to work semi-autonomously and organise/prioritise own work schedule on a short-term basis;

Proven ability to develop scripts and tools to enhance manual processes and existing tooling.

Experience working with large corporations.

Training on self-development platforms (i.e. HackTheBox, Pentesterlabs, wechall, etc.);

Participation in Bug Bounty programs;

Undergraduate (minimum) in technical degree (Computer Science, Software Engineer, Cyber Security);

Standard Industry certifications such as OSCP, CREST (CRT, CCT) or equivalent.

Attractive salary and benefits

20-day annual leave and 7-day sick leave, etc.

13th month salary and Annual Performance Bonus

Premium healthcare for yourself and family members

Monthly allowance for team activities

Premium welcome kit and frequent appreciation gifts

Extra benefits for long-term employees

Large scale products with modern technologies in banking domain

Clear roadmap for career advancement in both technical and leadership pathways

Well-structured learning and development programs (technical and soft skills)

Sponsored certificates in both IT and banking/finance

Premium accounts on Udemy

English learning with native teachers

Opportunity for traveling & training in Australia

Hybrid working model and excellent work-life balance

Well-equipped & modern Agile office with fully-stocked pantry

Special programs to improve your physical and mental health

Annual company trip and events

A solid talented team behind you - great people who love what they do

PEGASI – IT Recruitment Consultancy | Email: recruit@pegasi.com.vn | Tel: +84 28 3622 8666