Viet Capital Securities (VCSC)

Overview of job

Penetration Testing Practitioner

Department: Information Security.

Report to: Head of Information Security.

Our innovative and growing company is looking for a penetration tester. We appreciate you taking the time to review the list of qualifications and to apply for the position. If you don’t fill all of the qualifications, you may still be considered depending on your level of experience.

Key Responsibilities:

• Responsible for scoping and execution of penetration tests against a variety of technologies including web application, mobile and infrastructure.
• Provide network/application vulnerability assessment and penetration testing services globally through a comprehensive testing process, identifying weaknesses and vulnerabilities within the system and proposing countermeasures.
• Proven ability to perform computer network vulnerability assessment and penetration testing

Benefits:

• Working time: 5 days/week (Monday to Friday).
• Opportunity for promotion and career development.
• Competitive Income.
• Attractive Bonuses Policy (up to 8 months salary bonus in the end of the year).
• Compulsory Insurances full salary (Social Insurance, Health Insurance, Unemployment Insurance) based on the Labor Code and PVI premium health Insurance based on the Company's regulations.
• 11 Public holidays based on the Labor Code, 15-20 days annual leave based on the Company's regulation, 5-year-employee has 1 more annual leave day.
• Company Team Building Trip every year.
• Participate in other Company activities: Sports, Family Day, Children's Day.
• Training sponsorship programs: Securities certificates, Soft skills, Technical skills.
• Professional and dynamic working environment.

Work Place: Viet Capital Securities Joint Stock Company. 

• Floor 1 Vinatex Building, 10 Nguyen Hue Street, District 1, HCMC.
• Floor 15, Bitexco Financial Tower, 02 Hai Trieu Street, District 1, HCMC.

Job Requirements:                  

• In-depth knowledge and working experience of networking and the TCP protocol.
• Interest in security vulnerabilities and exploitation (as a practitioner).
• Experience in performing penetration testing in cloud-based environments is a plus.
• Innate knowledge of the strengths and weaknesses of operating systems, network and security appliances, application language and software being used.
• Knowledge in OWASP Top 10 vulnerabilities, and web application/mobile application/ API vulnerabilities and web application/mobile application business logic flaws and threats.