Cyber Security Researcher

Overview

Viettel Cyber Security One Member Limited Liability Company (VCS) focuses on the implementation, research, and in-depth development of information security products and solutions, while also providing cybersecurity (CS) products and services to large domestic and international organizations and enterprises.

Some notable achievements of VCS:

• The Champion of Pwn2Own 2023 & 2024. Previously, VCS consistently ranked in the Top Five positions at Pwn2Own Tokyo 2020, Vancouver 2021, and Toronto 2022.
• In addition to Pwn2Own, VCS has consistently made its mark and topped numerous prestigious cybersecurity attack rankings and competitions worldwide, including those held by Microsoft, Bugcrowd, Google, Oracle, and others.
• VCS has exploited over 400 Zero-day security vulnerabilities on major platforms and systems of Microsoft, Oracle, Jenkins, and others.
• Received 11 awards at the Cybersecurity Excellence Awards 2023, surpassing more than 800 nominations from leading global cybersecurity solution providers.
• Global InfoSec Awards 2023 (Cyber Defense Magazine)
• IT World Awards 2023: https://globeeawards.com/technology/winners/
• Viettel Cyber Security excelled in achieving the Gold award in the Best Cyber Security Company in Asia category for 2023.
• 07 Gold awards for products: Network Security Monitoring Solution (VCS-CyM), Abnormal Behavior Analysis Solution (VCS-KIAN), Network Security Orchestration, Automation and Response Solution (VCS-CyCir), Endpoint Anomaly Detection Solution (VCS-aJiant), Secure Remote Working Solution for Enterprises (VCS M-Suite); Cyber Threat Intelligence Solution (VCS-Threat Intelligence); Network Security Vulnerability Management and Control Solution (VCS-V2S).
• 03 Gold award for services: Managed Security Services (MSS), Penetration Testing Service (Pentest), IoT Security Assessment Service.

Responsibilities

• Job Description:

The primary role of an In-depth Cybersecurity Research Engineer is to research security techniques and technologies, and publish feasible research results that can be applied to the company’s products and solutions:

– Conduct in-depth research on security technologies, attack techniques, and network defense

– Develop tools, prototypes, and core engines related to security technologies, applicable in products and solutions

– Research and discover 0-day vulnerabilities in systems and applications; present research findings to the team, management, company, and community

– Attend domestic and international security conferences, presenting personal research

– Write blog posts to publish research results on the company’s websites

Qualifications

• Requirements/Competencies:

– In-depth professional knowledge in the corresponding specialization (software vulnerability exploitation, web application security, etc.)

– In-depth knowledge of corresponding research targets (Windows operating system, Linux operating system, Microsoft Exchange applications, etc.)

– In-depth knowledge of tools, systems, and technologies supporting security research (fuzzers, etc.)

• Professional Skills Requirements:

– Reverse engineering skills

– Software/application vulnerability exploitation skills

– Proficiency in using security research tools (debugger, disassembler, Burp Suite, other relevant tools)

– Strong research skills

– Preference for certifications: GXPN, OSED, OSEP, GREM, OSWE, OSEE

• Softskills:

– Meticulous and careful

– Mentoring skills

– Work and time management skills

– Communication and presentation skills

Benefits & perks

• Competitive annual total income package
• Opportunity to work with diverse domestic and international clients
• Annual salary review in March

• MIC health and personal accident insurance (coverage up to 600 million VND/year)
• Annual health check-up

• Awards recognizing performance and timely outstanding contributions
• 100% sponsorship for in-depth international professional certification based on position (in case of unsuccessful attempt, don’t worry, VCS will support 50% of the exam fee), special bonuses for employees achieving international professional certifications
• Continuous investment in the latest and most up-to-date learning materials in the field of Information Security from leading global vendors and institutes
• 100% of employees are provided with an Udemy eLearning account – learn anytime, anywhere
• Free participation in professional knowledge sharing programs and seminars from leading domestic and international speakers

• Working in a Grade A office – Landmark 72 building with a green space complex and a private area for gym and entertainment (billiards, PES, café, reading, Pingpong)
• 30-minute relaxation daily with Happy hours (4:00 PM – 4:30 PM)
• Sports activities: Football, Billiards, Poker, PES clubs, etc

• 12 days of annual leave according to Labor Law and 3 days of company vacation, traditional holiday on 22/12

• Personal birthday celebrations: Gifts and birthday cake from the Company
• Participation in company events: Quarterly team building activities, monthly birthday celebrations, Year End Party, vacations, International Women’s Day (March 8th), Vietnamese Women’s Day (October 20th) (female employees recieve ½ day off), Viettel Group birthday on June 1st, etc