Lead Pen Tester

JOB DESCRIPTION

We are seeking motivated Lead Pen Tester (Group Security) to be part of a team that evaluates a wide range of Our client's products and services - to identify security weaknesses and exposures that pose a risk to the enterprise, and work with teams to understand their risk and path to remediation.
Technical
Execute penetration tests, either in a team or individually, to identify vulnerabilitiesand weaknesses that could impact bank systems;
Including testing of web applications, mobile applications, web APIs, Infrastructure, Cloud technologies, and hardware.
Triage vulnerabilities and justify risk in alignment with common vulnerability scoringsystems, considering the environment and context;
Report testing results to key project stakeholders in varying formats (i.e. traditionalreport, bug tickets), including verbal communication;
Work with larger technical programs across the bank to understand and constructtesting requirements;
Where required, work as an embedded penetration tester on large programs;
Assist with other offensive security activities within the team
Self-manage security testing projects from end-to-end;
Participate in 'run the business' activities, such as maintenance and uplift of thepenetration testing environment.
Leadership
Maintains and increases motivation within team by regularly checking in onmotivation levels, and making adjustments quickly where needed (e.g. QCI, teammeeting, team engagement activity).
Creates and maintains an equally safe environment for all members of team to 'test and learn', share learning, challenge thinking, team development and explore new ideas.
Sets effective and meaningful goals and timelines for each team member that supports them to achieve beyond what is expected (e.g. align with Peak performance framework).
Provides input to Engineering Manager in making decision of Prioritising and ensuringresources for the right work and making trade-offs between current and futureperformance to balance immediate goals with longer-term growth for the team.
Supports the team to cut through complexity and create clarity by simplifyingpractices and processes.
Be responsible for team engagement & relations.

JOB REQUIREMENT

Must-have
8+ years of experience in IT/Security industry, and at least 3 years as a penetration tester;
Experience testing various technologies and platforms, including but not limited to; Web applications, web APIs, mobile applications (iOS, Android), network and server technologies, cloud services (AWS, Azure), and hardware;
Experience writing and conveying complex security findings through reports;
A comprehensive understanding of Penetration Testing frameworks and methodologies (OWASP, OSSTMM, WAHH);
Methodical, analytical approach with outstanding attention to detail. The ability to construct and execute testing within a controlled environment that complies with methodologies, policies, and best practice;
A clear understanding of both manual and automated penetration testing techniques, including knowledge of common penetration testing tools and the impacts they have on systems;
A good understanding of risk mitigation strategies when working in highly sensitiveenvironment;
Proven ability to work both individually and within a team environment (at times with little guidance), build strong relationships and maintain rapport with internal Our Client's stakeholders and 3rd party service providers;
Strong team working skills are essential;
Excellent verbal and written communication skills;
Ability to attend to the detail on multiple concurrent tasks while meeting variousdeadlines;
Ability to work semi-autonomously and organise/prioritise own work schedule on a short-term basis;
Proven ability to develop scripts and tools to enhance manual processes and existing tooling.
Nice to have:
Experience working with large corporations.
Training on self-development platforms (i.e. HackTheBox, Pentesterlabs, wechall, etc.);
Participation in Bug Bounty programs;
Undergraduate (minimum) in technical degree (Computer Science, Software Engineer, Cyber Security);
Standard Industry certifications such as OSCP, CREST (CRT, CCT) or equivalent.

WHAT'S ON OFFER

Generous compensation and benefit package
Attractive salary and benefits
20-day annual leave and 7-day sick leave, etc.
13th month salary and Annual Performance Bonus
Premium healthcare for yourself and family members
Monthly allowance for team activities
Premium welcome kit and frequent appreciation gifts
Extra benefits for long-term employees
Exciting career and development opportunities
Large scale products with modern technologies in banking domain
Clear roadmap for career advancement in both technical and leadership pathways
Well-structured learning and development programs (technical and soft skills)
Sponsored certificates in both IT and banking/finance
Premium accounts on Udemy
English learning with native teachers
Opportunity for traveling & training in Australia
Professional and engaging working environment
Hybrid working model and excellent work-life balance
Well-equipped & modern Agile office with fully-stocked pantry
Special programs to improve your physical and mental health
Annual company trip and events
A solid talented team behind you - great people who love what they do

CONTACT

PEGASI – IT Recruitment Consultancy | Email: recruit@pegasi.com.vn | Tel: +84 28 3622 8666
We are PEGASI – IT Recruitment Consultancy in Vietnam. If you are looking for new opportunity for your career path, kindly visit our website www.pegasi.com.vn for your reference. Thank you!

Job Summary

Company Type:

Product

Technical Skills:

Security

Location:

Ho Chi Minh - Viet Nam

Working Policy:

Salary:

Negotiation

Job ID:

J01402

Status:

Close

Related Job:

Featured Job

Associate Manager – Software Engineer

Ho Chi Minh - Viet Nam

Product

  • Java
  • ReactJS

Lead the decisions around scalable full-stack and cloud-native systems architecture. Advocate for best practices in system design, reliability, and observability. Take charge of delivering essential platform capabilities, including crew training and assessment (OCL), compliance systems (Track & Trace), restaurant monitoring and reporting (MRD), virtual restaurant assessments, and intelligent operational action systems for RGMs. Collaborate with product and stakeholders, translating business requirements into scalable solutions. Build and design scalable applications using React/React Native, Spring Boot, and NestJS. Develop robust APIs and microservices that support restaurant operational systems. Ensure high code quality through testing, code reviews, and performance enhancement. Manage and create cloud infrastructure using AWS (EKS, Lambda). Set up CI/CD pipelines using GitLab CI. Guarantee strong monitoring and system reliability through the use of Datadog. Collaborate closely with engineering and product teams across global locations to deliver platform capabilities. Address complex technical challenges and provide scalable solutions to enhance platform reliability and operational efficiency.

Negotiation

View details

Technical Lead

Ho Chi Minh - Viet Nam

Product

  • NodeJS
  • Python

Leading the backend development team, providing technical direction, mentorship, and best practices. Designing and implementing scalable, secure, and high-performance microservices-based architectures. Architecting and implementing agentic AI workflows and RAG (Retrieval-Augmented Generation) systems for personalized user interactions and automated coaching features. Overseeing data pipelines and infrastructure required for real-time AI model inference within a microservices-based environment. Collaborating with stakeholders to align on requirements and delivery timelines. Optimizing application performance, monitoring system reliability, and proactively troubleshooting issues. Advocating for CI/CD pipelines, automated testing, and robust version control strategies. Documenting key architectural decisions, APIs, and processes for internal use.

Negotiation

View details

Partner Implementation Engineer (Security & Digital Trust)

Ha Noi - Viet Nam

Outsource

  • System

Đóng vai trò là người thực hiện triển khai chủ chốt, chịu trách nhiệm triển khai, cấu hình và tích hợp các giải pháp Security & Digital Trust (PKI, Chữ ký số, Mã hóa, MFA) vào hệ thống thực tế của khách hàng, đảm bảo hệ thống vận hành ổn định, bảo mật và đúng thiết kế. Triển khai hệ thống (Implementation) Chuẩn bị môi trường: kiểm tra hạ tầng (Server, Hệ điều hành, Cơ sở dữ liệu, Mạng) Cài đặt & cấu hình giải pháp: PKI / CA / Chữ ký số / MFA / Mã hóa Thiết lập chính sách bảo mật, quy trình nghiệp vụ Kết nối với thiết bị bảo mật (HSM, Quản lý Khóa) Triển khai trên nền tảng Cloud / Container (nếu có) Triển khai hệ thống trên Kubernetes / OpenShift Cấu hình tài nguyên (YAML: Pod, Dịch vụ, Ingress, Bản đồ Cấu hình, Bí mật) Thiết lập lưu trữ (Khối Lưu trữ Không gian); mạng nội bộ Áp dụng các chính sách bảo mật cho container Tích hợp hệ thống (Integration) Hỗ trợ tích hợp với: Trang web/ Ứng dụng/ Giao diện lập trình ứng dụng và IAM / SSO / AD / LDAP Hướng dẫn sử dụng API/SDK Kiểm tra luồng dữ liệu & bảo mật giao tiếp Phối hợp với nhóm khách hàng (Phát triển / Cơ sở hạ tầng / Bảo mật) Kiểm thử & nghiệm thu (QA/UAT) Thực hiện kiểm thử kỹ thuật & kịch bản vận hành Hỗ trợ UAT với khách hàng Kiểm tra tính đúng đắn của: Chữ ký số; Chứng thư và Luồng xác thực Vận hành & hỗ trợ Giám sát hệ thống, phân tích log, xử lý sự cố Hỗ trợ sau triển khai (L2/L3) Đảm bảo hệ thống hoạt động ổn định & HA Tài liệu & chuyển giao Xây dựng tài liệu triển khai (cấu trúc, cấu hình) Hướng dẫn vận hành cho khách hàng Đào tạo kỹ thuật cơ bản

Negotiation

View details