(Senior/ Lead) Penetration Tester

ABOUT CLIENT

Our client is a global technology company that specializes in providing innovative IT solutions for the financial services industry

JOB DESCRIPTION

Perform thorough penetration testing on various platforms like web, mobile, APIs, cloud, infrastructure, and banking systems.
Detect, confirm, and document security weaknesses such as authentication, authorization, encryption, access control, session management, input validation, and business logic errors.
Use security evaluation methods like OWASP Top 10, OWASP API Top 10, OWASP MSTG, in addition to banking security protocols.
Evaluate banking processes such as payments, cards, accounts, AML/KYC, fraud prevention, and digital banking offerings.
Generate penetration testing reports containing risk evaluations, business consequences, proof of vulnerabilities, and suggestions for mitigation.
Collaborate with engineering and security groups to clarify discoveries, aid in remediation, and verify solutions.
Assist in security tasks throughout the software development lifecycle by engaging in threat modeling, test preparation, and release validation activities.
Conduct vulnerability assessments, validate exploit potentials, and address false alerts.
Aid audit and compliance processes by providing security data and monitoring remedial actions.
Keep up-to-date on new threats, attack strategies, and security best practices.

JOB REQUIREMENT

Penetration testing & ethical hacking across web, mobile, API, network, and cloud
Banking systems, payments, AML/KYC, fraud management expertise
Web/API security (OWASP Top 10, auth, access control, business logic)
Mobile app security (iOS/Android authentication, sessions, storage, secure comms)
Network, server, OS, infrastructure & cloud security (AWS, Azure, GCP)
Tools: Burp Suite, ZAP, Nmap, Nessus, Metasploit, Wireshark, Postman, MobSF
Reporting, remediation, retesting, and stakeholder communication
Knowledge of secure coding, encryption, IAM, data privacy, and frameworks
A big plus
Financial sector pen testing experience
Familiarity with PCI DSS, ISO 27001, SOC 2, SWIFT CSCF
Secure code reviews, CI/CD security integration (SAST, DAST, SCA)
Container/Kubernetes/Docker/IaC security
Red teaming & adversary simulation
Scripting (Python, Bash, PowerShell)

WHAT'S ON OFFER

Attractive salary package
Guaranteed 13th-month salary
Performance-based bonus
Access to professional English course
Comprehensive health insurance
Generous annual leave allowance

CONTACT

PEGASI – IT Recruitment Consultancy | Email: recruit@pegasi.com.vn | Tel: +84 28 3622 8666
We are PEGASI – IT Recruitment Consultancy in Vietnam. If you are looking for new opportunity for your career path, kindly visit our website www.pegasi.com.vn for your reference. Thank you!

Job Summary

Company Type:

Outsource

Technical Skills:

Security, Pentest

Location:

Ho Chi Minh, Ha Noi - Viet Nam

Working Policy:

Hybrid

Job ID:

J02215

Status:

Active

Related Job:

Senior QA Manager

Ho Chi Minh - Viet Nam

Product

  • Automation Test
  • Manual Test

Oversee QA delivery and performance across 12 product lines, including test automation and performance testing. Lead and develop five team leads through goal setting, regular one-on-ones, performance management, and hiring, including onboarding two new hires. Set and manage team-level targets against the organisation's QA scorecard, focusing on measurable quality outcomes rather than test case counts. Manage daily QA operations within the release train model, covering defect lifecycle, test execution, triage, estimation, reviews, and reporting, while proposing improvements to the model. Strengthen team leads' specification review and estimation capabilities, enabling them to handle area-level scoping independently without VP involvement. Increase test automation coverage and engineer productivity while accelerating testing cycles without compromising coverage or confidence. Lead QA's analysis of escaped defects, ensuring customer issues drive process improvements. Collaborate with Support to identify recurring and high-impact issues and share insights across teams. Partner with Product and Development to assess requirements from a customer impact perspective and strengthen defect prevention. Prepare quarterly business reviews and present team performance metrics alongside the VP, who owns the QA narrative for executive leadership. Provide quality evidence to support the VP's release go/no-go decisions, without owning the final release decision.

Negotiation

View details

Senior Frontend Engineer (Platform)

Ho Chi Minh - Viet Nam

Outsource

  • ReactJS
  • Typescript

Develop and uphold frontend templates, boilerplates, and libraries to assist product teams in enhancing efficiency. Play a role in enhancing the design system and component library. Aid frontend teams in incorporating and leveraging guidelines, templates, and tools. Ensure an efficient and scalable frontend development setup with contemporary toolchains. Assess the compatibility of new frontend technologies with our existing landscape. Assist in initiating new frontend projects with adherence to predefined standards, best practices, and toolchains. Contribute to establishing and refining frontend standards and best practices within the organization.

Negotiation

View details

QA Team Lead

Ho Chi Minh - Viet Nam

Product, AI Application Platform

  • Manual Test
  • Automation Test
  • Management
  • Playwright

Take charge of QA delivery for client projects, ensuring high quality and readiness for release, and providing transparent status updates to the team Participate in client and stakeholder calls to discuss test results, identify risks, and determine remaining tasks Utilize AI tools to streamline test design, conduct exploratory checks, and manage regression testing Provide mentorship to approximately 2 QA contractors, offering feedback, assistance, and maintaining high standards Collaborate with the development team on creating test plans to ensure comprehensive coverage aligns with the features being delivered Create concise and informative reports focusing on what has passed, what has failed, and any impediments.

Negotiation

View details