Job Summary
Job description
Overview of job
Responsibilities
• Perform security assessment of Network, Operating System, and Application via security audit, vulnerability assessment, penetration testing, and application vulnerability analysis.
• Perform vulnerability research in software applications, protocols, and network services via blackbox fuzzing or source code review.
• Research new attacking techniques and cutting edge security topics.
• Develop/Write exploit or use public exploit to gain access to the network.
• Document technical issues and findings identified during the security assessment.
• Deliver professional onsite and remote briefings to clients based on results of security assessments.
• Deliver presentation and training to both technical and non-technical audiences.
• Assist clients with questions regarding vulnerabilities and the remediation efforts involved in eliminating them.
• Improve customer deliverable through report template and procedural updates.
• Write scripts to automate assessment tasks and improve work efficiency.
Why You'll Love Working Here
- ECQ firmly believes in Skills and Quality of Work. No certification or degree is required. All candidates are welcomed and will be screened through technical interview
- Very attractive salaries that commensurate with work experience
- Professional work environment
- Annual leave, insurances will be following to Vietnam Law and as company's regulations
Job Requirement
Your Skills and Experience
Skills and Experience
1. Minimum 2 years of direct security experience. Juniors are welcomed if the answers are Yes to Item 8, 9, 10, and 11.
2. In-depth knowledge the TCP/IP stack.
3. Solid understanding of various protocols from the application layer to the Ethernet layer.
4. Familiar with various network topologies and standards such as LAN/WAN/VPN/Wireless LAN.
5. Expert or advanced knowledge in internals of Windows or Unix/Linux operating system. You are not required to be an expert in both OS but you have to be an expert in at least one.
6. Familiar with various security tools including port scanners, vulnerability scanners (network/OS/app/web app), exploit frameworks, sniffers, password crackers, and wireless auditing tools.
7. Familiar with various penetration testing and application testing techniques.
8. Strong knowledge in web application attacks and defenses.
9. Proficient in at least one of the following programming/scripting languages: Python, C, Golang, Assembly, Perl, and Bash. Other programming language can be considered.
10. Practical knowledge in exploit writing/development.
11. Familiar with debugger tools such as IDA Pro, WinDBG, Immunity Debugger, and gdb.
Soft Skills
• Good command in both Written and Spoken English.
• An ability to work under a dynamic environment and remotely.
• Good team player.
• Able to work under pressure with positive attitude towards the team.
• Reliable responsibility.
• Must be able to travel abroad.
ECQ firmly believes in Skills and Quality of Work. No certification or degree is required. All candidates are welcomed and will be screened through technical interview.
All applications will be treated as strictly confidential. Successful candidate will receive attractive remuneration package. Interested applicants please submit your application and resume with a recent photo either by post or e-mail to the following address.
Languages
-
English
Speaking: Intermediate - Reading: Intermediate - Writing: Intermediate
Technical Skill
- IT Security
- C
- TCP/IP
- Wireless
- Windows
- Linux
- LAN/WAN
- VPN
- Python
- Unix
- Perl
- Assembly
- Networking
- Golang
- Penetration testing
- LAN
- Bash
- Web App
- Ethernet
- GDB
- WAN
COMPETENCES
- Dynamic
- Teamwork
- Work under pressure
- Reliable
- Positive Attitude
- Responsible
BUSINESS PROFILE
E-CQURITY (ECQ) is a leading information system security firm.
The general perception about information system security has been stagnant over the last 10 years until recently. The security industry carries out aggressive advertising and places heavy focus on security products and technologies such as firewalls, anti-virus software and encryption. ECQ established its headquarters in Thailand to bring an aggressive and comprehensive perspective toward information system security to the customers in Southeast Asia and Asia.
ECQ's motto "Offend. Defend. Manage" captures the essence of our IT security strategy for our customers.