Pentest Manager

Overview

Viettel Cyber Security One Member Limited Liability Company (VCS) focuses on the implementation, research, and in-depth development of information security products and solutions, while also providing cybersecurity (CS) products and services to large domestic and international organizations and enterprises.

Some notable achievements of VCS:

• The Champion of Pwn2Own 2023 & 2024. Previously, VCS consistently ranked in the Top Five positions at Pwn2Own Tokyo 2020, Vancouver 2021, and Toronto 2022.
• In addition to Pwn2Own, VCS has consistently made its mark and topped numerous prestigious cybersecurity attack rankings and competitions worldwide, including those held by Microsoft, Bugcrowd, Google, Oracle, and others.
• VCS has exploited over 400 Zero-day security vulnerabilities on major platforms and systems of Microsoft, Oracle, Jenkins, and others.
• Received 11 awards at the Cybersecurity Excellence Awards 2023, surpassing more than 800 nominations from leading global cybersecurity solution providers.
• Global InfoSec Awards 2023 (Cyber Defense Magazine)
• IT World Awards 2023: https://globeeawards.com/technology/winners/
• Viettel Cyber Security excelled in achieving the Gold award in the Best Cyber Security Company in Asia category for 2023.
• 07 Gold awards for products: Network Security Monitoring Solution (VCS-CyM), Abnormal Behavior Analysis Solution (VCS-KIAN), Network Security Orchestration, Automation and Response Solution (VCS-CyCir), Endpoint Anomaly Detection Solution (VCS-aJiant), Secure Remote Working Solution for Enterprises (VCS M-Suite); Cyber Threat Intelligence Solution (VCS-Threat Intelligence); Network Security Vulnerability Management and Control Solution (VCS-V2S).
• 03 Gold award for services: Managed Security Services (MSS), Penetration Testing Service (Pentest), IoT Security Assessment Service.

Responsibilities

• Job Description:

– Participate in the implementation of penetration testing (pentest) services for clients: receive and define the requirements, scope, and assurance conditions of assigned pentest projects

– Break down tasks according to the pentest process and assign them to team members involved in the project execution

Qualifications

• Educational Background: 

– Bachelor’s degree in: Information Security; Information Technology, Computer Science, Mathematics-Informatics…

– English proficiency equivalent to TOEIC 650 or higher

• Requirements/Competencies:

– Thorough understanding of application vulnerabilities and their exploitation techniques

– Thorough understanding of Secure Coding Guidelines, proficient and secure programming skills in one or more programming frameworks

– Knowledge of protection and prevention mechanisms, and knowledge of analyzing and building 1-day payloads

– Thorough understanding of the application pentest process and application security assessment methodologies (Blackbox, Greybox, Whitebox)

– Thorough understanding of Web and Mobile application security assessment checklists based on the international OWASP standard

– At least 2 years of experience in an application security assessment role

– Information security certifications are an advantage: OSCP, OSWE, CPENT, Security+…

Benefits & perks

• Competitive annual total income package
• Opportunity to work with diverse domestic and international clients
• Annual salary review in March

• MIC health and personal accident insurance (coverage up to 600 million VND/year)
• Annual health check-up

• Awards recognizing performance and timely outstanding contributions
• 100% sponsorship for in-depth international professional certification based on position (in case of unsuccessful attempt, don’t worry, VCS will support 50% of the exam fee), special bonuses for employees achieving international professional certifications
• Continuous investment in the latest and most up-to-date learning materials in the field of Information Security from leading global vendors and institutes
• 100% of employees are provided with an Udemy eLearning account – learn anytime, anywhere
• Free participation in professional knowledge sharing programs and seminars from leading domestic and international speakers

• Working in a Grade A office – Landmark 72 building with a green space complex and a private area for gym and entertainment (billiards, PES, café, reading, Pingpong)
• 30-minute relaxation daily with Happy hours (4:00 PM – 4:30 PM)
• Sports activities: Football, Billiards, Poker, PES clubs, etc

• 12 days of annual leave according to Labor Law and 3 days of company vacation, traditional holiday on 22/12

• Personal birthday celebrations: Gifts and birthday cake from the Company
• Participation in company events: Quarterly team building activities, monthly birthday celebrations, Year End Party, vacations, International Women’s Day (March 8th), Vietnamese Women’s Day (October 20th) (female employees recieve ½ day off), Viettel Group birthday on June 1st, etc