Network Security Audit

Overview

Viettel Cyber Security One Member Limited Liability Company (VCS) focuses on the implementation, research, and in-depth development of information security products and solutions, while also providing cybersecurity (CS) products and services to large domestic and international organizations and enterprises.

Some notable achievements of VCS:

• The Champion of Pwn2Own 2023 & 2024. Previously, VCS consistently ranked in the Top Five positions at Pwn2Own Tokyo 2020, Vancouver 2021, and Toronto 2022.
• In addition to Pwn2Own, VCS has consistently made its mark and topped numerous prestigious cybersecurity attack rankings and competitions worldwide, including those held by Microsoft, Bugcrowd, Google, Oracle, and others.
• VCS has exploited over 400 Zero-day security vulnerabilities on major platforms and systems of Microsoft, Oracle, Jenkins, and others.
• Received 11 awards at the Cybersecurity Excellence Awards 2023, surpassing more than 800 nominations from leading global cybersecurity solution providers.
• Global InfoSec Awards 2023 (Cyber Defense Magazine)
• IT World Awards 2023: https://globeeawards.com/technology/winners/
• Viettel Cyber Security excelled in achieving the Gold award in the Best Cyber Security Company in Asia category for 2023.
• 07 Gold awards for products: Network Security Monitoring Solution (VCS-CyM), Abnormal Behavior Analysis Solution (VCS-KIAN), Network Security Orchestration, Automation and Response Solution (VCS-CyCir), Endpoint Anomaly Detection Solution (VCS-aJiant), Secure Remote Working Solution for Enterprises (VCS M-Suite); Cyber Threat Intelligence Solution (VCS-Threat Intelligence); Network Security Vulnerability Management and Control Solution (VCS-V2S).
• 03 Gold award for services: Managed Security Services (MSS), Penetration Testing Service (Pentest), IoT Security Assessment Service.

Responsibilities

• Job Description

– Perform Information Security (IS) inspections and assessments for both the Corporation and our Clients, adhering to Network Security standards and guidelines. This includes network design, device configuration, policy setup, and vulnerability assessments for network and security devices. This will cover:

• • Network devices such as Routers/Switches.
  • Security devices such as Firewalls, Load Balancers (LBs), Intrusion Detection/Prevention Systems (IDS/IPS), Anti-DDoS Appliances, and Network Access Control (NAC).
  • Network infrastructure planning and design.

– Research IS for network devices and protocols, then issue standards and guidelines to ensure their security.

– Participate in investigating and handling IS incidents for the Corporation and Clients. This involves investigation, remediation, implementing hardening configurations, and setting policies on network and security devices.

– Research vulnerabilities and attack techniques at the network infrastructure layer, and build a repository of attack tools.

– Research new network technologies (SDN, VXLAN, etc.).

– Research national and international IS standards.

Qualifications

• Educational Background: 

– Bachelor’s degree or higher in Computer Science, Information Technology, Mathematics-Informatics, or related fields

– English proficiency equivalent to TOEIC 650 or higher

• Requirements/Competencies:

– 2+ years of experience in Network Operations, including configuring and troubleshooting issues on Switches, Routers, and Firewalls.

– Experience working with network security devices such as LBs, IDS/IPS, Anti-DDoS Appliances, NAC, and WAF is a plus.

– Knowledge of network models (OSI, TCP/IP) and Layer 3 routing protocols (static, OSPF, BGP) and Layer 2 switching (STP, VRRP, HSRP).

– Knowledge of network security, including understanding, evaluating, and exploiting vulnerabilities in network/security devices, and proposing remediation plans, is a plus.

• Skills

– Strong English reading comprehension, equivalent to TOEIC 550 or higher.

– Ability to independently perform IS assessments: excellent communication skills, proactivity, and a client-friendly approach.

– Skills in synthesizing reports and presenting them in a clear, scientific manner.

• Preferred

– Understanding of IS and various types of cyberattacks.

– Holds a network certification like CCNP, CCIE, JNCIE, or a security certification such as CCNP Security, CCIE Security, OSCP, CEH, etc.

– Ability to write simple scripts for network device/system automation.

– Experience with installing and operating open-source OS and software (Windows, Linux, etc.).

Benefits & perks

• Competitive annual total income package
• Opportunity to work with diverse domestic and international clients
• Annual salary review in March

• MIC health and personal accident insurance (coverage up to 600 million VND/year)
• Annual health check-up

• Awards recognizing performance and timely outstanding contributions
• 100% sponsorship for in-depth international professional certification based on position (in case of unsuccessful attempt, don’t worry, VCS will support 50% of the exam fee), special bonuses for employees achieving international professional certifications
• Continuous investment in the latest and most up-to-date learning materials in the field of Information Security from leading global vendors and institutes
• 100% of employees are provided with an Udemy eLearning account – learn anytime, anywhere
• Free participation in professional knowledge sharing programs and seminars from leading domestic and international speakers

• Working in a Grade A office – Landmark 72 building with a green space complex and a private area for gym and entertainment (billiards, PES, café, reading, Pingpong)
• 30-minute relaxation daily with Happy hours (4:00 PM – 4:30 PM)
• Sports activities: Football, Billiards, Poker, PES clubs, etc

• 12 days of annual leave according to Labor Law and 3 days of company vacation, traditional holiday on 22/12

• Personal birthday celebrations: Gifts and birthday cake from the Company
• Participation in company events: Quarterly team building activities, monthly birthday celebrations, Year End Party, vacations, International Women’s Day (March 8th), Vietnamese Women’s Day (October 20th) (female employees recieve ½ day off), Viettel Group birthday on June 1st, etc