Penetration Tester (Remote)

JOB DESCRIPTION

As a penetration tester, you'll understand complex computer systems and technical cyber security terms. You'll need to:
Work with clients to determine their requirements from the test, for example the number and type of systems they would like testing
Plan and create penetration methods, scripts and tests
Carry out remote testing of a client's network or onsite testing of their infrastructure to expose weaknesses in security
Simulate security breaches to test a system's relative security
Create reports and recommendations from your findings, including the security issues uncovered and level of risk
Advise on methods to fix or lower security risks to systems
Present your findings, risks and conclusions to management and other relevant parties
Consider the impact your 'attack' will have on the business and its users
Understand how the flaws that you identify could affect a business, or business function, if they're not fixed.

JOB REQUIREMENT

Experience and Qualifications - Be studying or have just completed a degree in any of the following:
Computer science
Computing and information systems
Cyber security
Forensic computing
Network management
Computer systems engineering
OSCP Certification
Crest Certification
Skills and Knowledge:
An in-depth understanding of computer systems and their operation
Excellent spoken and written communication to explain your methods to a technical and non-technical audience
Attention to detail, to be able to plan and execute tests while considering client requirements
The ability to think creatively and strategically to penetrate security systems
Good time management and organisational skills to meet client deadlines
Ethical integrity to be trusted with a high level of confidential information
The ability to think laterally and 'outside the box'
Teamwork skills, to support colleagues and share techniques
Exceptional analytical and problem-solving skills and the persistence to apply different techniques to get the job done
Business skills to understand the implications of any weaknesses you find
Commitment to continuously update your technical knowledgebase
Personal Attributes:
English speaking
The ability to multi-task in a complex and demanding environment.
A commitment to teamwork.
Enthusiastic, diplomatic, and calm under pressure
Ability to develop creative ideas and transform them into practical reality
Strong interpersonal skills
Strong analytical skills

CONTACT

PEGASI – IT Recruitment Consultancy | Email: recruit@pegasi.com.vn | Tel: +84 28 3622 8666
We are PEGASI – IT Recruitment Consultancy in Vietnam. If you are looking for new opportunity for your career path, kindly visit our website www.pegasi.com.vn for your reference. Thank you!

Job Summary

Company Type:

Outsource

Technical Skills:

Security

Location:

Ho Chi Minh - Australia

Working Policy:

Job ID:

J01370

Status:

Close

Related Job:

Security Architect

Ho Chi Minh, Ha Noi - Viet Nam

Outsource

  • Security

Offer expert guidance on Security Architecture to assist business and project teams in understanding the security implications of proposed system changes and solutions. Evaluate proposed solutions to ensure compliance with Information Risk Policy and organizational risk tolerance. Analyze non-standard flows across systems, applications, and proposed solutions to identify security risks, threats, and vulnerabilities. Identify necessary security control components, countermeasures, and design requirements to address the identified risks. Create conceptual and logical security architecture designs for proposed solutions. Define security controls across various areas including Identity and Access, Data and Media Protection, Security Information, and Event Management, Communications, Configurations, and Vulnerability Management. Determine suitable security controls to address identified risks, factoring in technical capability, business benefit, and commercial implications. Manage technical deviations and major risks, including suggesting alternative solutions or compensating controls to mitigate potential impacts. Influence stakeholders to update solution requirements to reflect relevant security needs. Supervise significant architectural decisions to ensure secure outcomes and compliance with governance practices. Assist in the deployment of required notifications and engagement with relevant Technology Architecture Forums. Utilize and update existing security control reference patterns. Develop new security patterns describing integration approaches, use cases, reusable components, and technical references for enterprise security capabilities. Proactively manage security risk and assurance requirements when developing designs that may alter the organization's risk posture. Support compliance with internal security policies, governance requirements, and risk management expectations. Engage with various business and technology stakeholders to influence security aspects within target-state architectures and central technology roadmaps. Provide guidance and mentorship on the practical application of security and risk management concepts, principles, strategies, and industry standards. Assist in the professional development of colleagues by sharing security knowledge and helping them develop relevant capabilities.

Negotiation

View details

Post-Sales Network & Cybersecurity Engineer

Ho Chi Minh, Ha Noi - Viet Nam

Outsource

  • Network
  • Security

Implementing solutions and providing technical support for networking and cybersecurity solutions, including various vendors' products. Analyzing customer requirements, designing solutions, and overseeing the entire project delivery process. Troubleshooting network and security issues, identifying root causes, and implementing corrective actions. Creating and managing technical documentation, including implementation plans, test plans, and network diagrams. Collaborating with customers, sales, project managers, presales, and vendor technical support teams for successful project delivery. Providing system handovers, technical training, knowledge transfer, and operational guidance to customers. Participating in maintenance, upgrades, migrations, and after-hours support as needed. Constantly updating knowledge in networking and security technologies, developing technical expertise, and obtaining relevant certifications.#Successful performance indicators Timely project delivery that meets technical requirements. Stable systems, timely incident resolution, and minimal downtime. Highly satisfied customers and effective post-sales support. Thorough technical documentation and appropriate system handover. Efficient coordination and escalation with customers and vendor technical support teams. Ongoing professional development, relevant certifications, and contributions to team best practices.

Negotiation

View details

Senior AI DevSecOps Engineer

Ho Chi Minh - Viet Nam

Product

  • Devops
  • AWS
  • Azure
  • Security

Management of CI/CD Pipeline: Ensure automation, security, and scalability across all stages of the development lifecycle. Infrastructure & Security: Design and implement secure multi-cloud infrastructure solutions leveraging cloud services, containerization, and orchestration tools. Policy as Code: Define and enforce security and compliance policies across Kubernetes clusters using OPA or Kyverno, ensuring guardrails are automated and auditable. AI & Platform Automation: Drive the adoption of AI-powered tools and workflows to automate infrastructure operations, optimize CI/CD pipelines, accelerate root cause analysis, improve security posture, and enhance engineering productivity. Observability & Alerting: Build and maintain a comprehensive observability stack with proactive alerting, dashboards, and runbooks for critical business flows and security events. Secret & Credential Management: Design and enforce secrets management practices across all environments ensuring zero hardcoded credentials in codebases and pipelines. Incident Response & On-Call: Own and continuously improve incident response processes, define runbooks, lead post-mortems, track MTTR, and participate in on-call rotation to maintain platform reliability and SLO adherence. Threat Modelling & Penetration Testing: Conduct regular threat modelling sessions with engineering teams and coordinate or perform penetration testing activities to proactively identify attack surfaces before they reach production. Code Security: Conduct regular code reviews and static/dynamic analysis to identify and remediate security vulnerabilities. Compliance and Best Practices: Ensure compliance with industry standards and best practices. Collaboration: Collaborate with development, operations, and security teams to foster a culture of automation and security-first thinking. Mentorship: Mentor junior engineers and other team members on security best practices. Documentation: Maintain thorough and up-to-date documentation of security policies, procedures, and incident reports. Trend Scouting: Stay updated with the latest trends in technology and AI to integrate innovative solutions into our processes.

Negotiation

View details