Penetration Tester

Overview

Viettel Cyber Security (VCS) is a leading cyber security firm, dedicated to protecting digital infrastructures worldwide while conducting in depth research and analysis for security solutions. Leveraging 100% in house development, VCS offers a comprehensive range of cutting-edge cyber security solutions, protecting governments, financial institutions, large corporations and SMEs against sophisticated cyber threats in the digital age.

VCS is internationally recognized for its Champion titles at Pwn2Own 2023 & 2024, consistent Top 5 global rankings, the discovery of400+ zero-day vulnerabilities, and multiple prestigious honors, including Gold – Best Cyber Security Company in Asia.

Responsibilities

– Conduct Information Security (IS) assessments for large, complex, or multi-platform applications

– Develop security guidelines by researching platforms, technologies, and existing vendor documentation

– Provide IS training (awareness, secure coding, secure configuration) for clients

– Handle IS incidents

– Analyze 1-day vulnerabilities and write exploitation payloads

– Research 0-day vulnerabilities, new exploitation techniques, and new technologies. Publicly share findings through company seminars and blogs

– Participate in the IS community

– Join internal or external drills and corporate CTF (Capture The Flag) events

Qualifications

– 2+ years of experience in Penetration Testing

– Knowledge of secure application programming for web applications

– A solid grasp of application vulnerabilities and exploitation techniques

– Understanding and proficiency in programming with one or more programming frameworks

– Knowledge of webshells and detection methods

– Knowledge of protection and prevention mechanisms, and an understanding of how to analyze and build 1-day payloads

– Ability to perform a black-box penetration test on a system

– Knowledge of the web application white-box and black-box assessment process

– Preference for candidates with IS certifications like OSCP, OSEP, OSWE, etc

        – Bachelor’s degree in Information Technology, Information Security, Computer Science, Mathematics-Informatics or related IT fields

Benefits & perks

• Competitive annual total income package
• Annual salary review in March

• Bao Viet health and personal accident insurance
• Annual health check-up
• Special support for female employees during maternity leave.

• Awards recognizing performance and timely outstanding contributions
• 100% sponsorship for in-depth international professional certification based on position (in case of unsuccessful attempt, don’t worry, VCS will support 50% of the exam fee), special bonuses for employees achieving international professional certifications
• Continuous investment in the latest and most up-to-date learning materials in the field of Information Security from leading global vendors and institutes
• 100% of employees are provided with an Udemy eLearning account – learn anytime, anywhere
• Free participation in professional knowledge sharing programs and seminars from leading domestic and international speakers.

• Opportunity to work with diverse domestic and international clients
• Working in a Grade A office – Landmark 72 building with a green space complex and a private area for gym and entertainment (billiards, PES, café, reading, Pingpong)
• 30-minute relaxation daily with Happy hours (4:00 PM – 4:30 PM)
• Sports activities: Swimming, Pickleball, Billiards, Poker, PES, etc.

• Twelve (12) days of annual leave according to Labor Law, three (3) days of company vacation and one (1) traditional holiday on 22/12.

• Personal birthday celebrations: Gifts and birthday cake from the Company
• Gift and participation in company events: Quarterly team building activities, monthly birthday celebrations, Year End Party, vacations, International Women’s Day (March 8th), Vietnamese Women’s Day (October 20th) (female employees receive ½ day off), Viettel Group birthday on June 1st, etc
• Care parents and children of employees on special occasions.