Penetration Tester

Trách nhiệm chính

• Perform Web Application and API penetration testing based on OWASP Top 10 and industry best practices.
• Analyze and validate True/False Positive results from SAST, DAST, and SCA security tools.
• Develop Proof‑of‑Concept (PoC) exploits for identified vulnerabilities, including CVE-level issues.
• Conduct Mobile Application Security Testing for Android and iOS platforms.
• Perform manual penetration testing on web-based enterprise systems and prepare detailed security reports.
• Provide guidance on Secure Coding Practices to development teams.
• Research new vulnerabilities (including potential 0‑days) and support CVE registration when applicable.
• Collaborate closely with Backend, DevOps, Cloud, and QA teams to ensure remediation and secure system architectures.
• Utilize scripting skills (Python, Go, Bash, etc.) to automate testing tasks and improve security workflows.
• Participate in security architecture reviews and risk assessments.
• Perform penetration testing and security assessments on Cloud Services (AWS, GCP).

Yêu cầu công việc

• Bachelor’s degree in Computer Science, Information Security, Software Engineering, or related field.
• Hands-on experience in Application Security or Penetration Testing.
• Strong understanding of OWASP Top 10 and secure application development principles.
• Experience working with SAST, DAST, and SCA tools and validating findings.
• Ability to develop PoCs and exploit known vulnerabilities.
• Basic knowledge of security technologies such as Firewall, VPN, IPS/IDS, EDR.
• Understanding of IT infrastructure fundamentals (Network, WAS, DB, OS, etc.).
• Proficiency in scripting languages such as Python, Go, or Bash.
• Experience with Mobile Application penetration testing (Android/iOS).
• Solid analytical, documentation, and communication skills.
• English communication skills sufficient for team collaboration.

Yêu cầu ưu tiên

• Certifications such as OSCP or CEH.
• Award history or strong performance in major CTF competitions.
• Experience discovering and registering 0‑day vulnerabilities (CVE assignment).
• Hands-on experience with Cloud environments such as AWS or GCP.
• Familiarity with DevSecOps, CI/CD security, or security automation.
• Experience with threat modeling or security design review.

Mức lương

• Salary and bonus based on ability.
• Salary is periodically reviewed and adjusted once a year.

Phúc lợi

• Performance-based bonuses (PI) twice a year.
• Allowances for lunch, transportation, and phone charges.
• Team parties and monthly outings.
• Annual company workshop travel.
• Bonuses/Gifts for holidays, International Labor Day, International Women's Day, etc.
• Happy hours every Friday and internal clubs (football, badminton, etc.).
• High-class 5-star standard office with modern equipment and amenities.
• Provided with latest generation LG Gram laptop and large LG screen.
• Opportunities for training and onsite work/study abroad, especially in Korea.

Hình thức làm việc

• Working hours: 8:00 - 17:00, Monday to Friday.
• No pressure to work overtime or weekends.

Thông tin khác

• Young and fun working environment with team members mostly from 9-10x generation.
• Office location: Tầng 15, tòa Keangnam Landmark 72, Mễ Trì, Yên Hòa, Hà Nội.