Timo Vietnam

Overview of job

We are looking for a Senior Offensive Security Engineer to join Kredivo Group's offensive security team, based at Timo in HCMC.

You will actively test and strengthen the defences behind Timo's digital banking platform, conducting penetration tests, simulating real-world attacks, and partnering with engineering teams to remediate vulnerabilities. Working closely with Kredivo Group's Information Security function, you will help raise the security bar across Timo's web, mobile, and infrastructure environments.

You will report to the Infosec Lead.

What You Will Do

• Conduct penetration tests and vulnerability assessments across Timo's infrastructure, web applications, and mobile apps.
• Simulate real-world attacks to identify weaknesses, assess impact, and prioritize remediation.
• Use industry-standard tools, such as Metasploit, Burp Suite, Nmap, and similar, to identify exploitable issues.
• Document findings clearly, produce detailed reports with risks, exploit paths, and recommended mitigations.
• Partner with the Engineering and Infrastructure teams to remediate vulnerabilities and embed secure practices.
• Integrate security testing into CI/CD pipelines to enable continuous security validation
• Build automation, develop scripts and tools (Python, PowerShell, or similar) to streamline offensive security operations.
• Stay ahead of emerging threats, research new attack techniques, tools, and defences.

Our deliverable is a leading software that is changing the way people do banking. You will be proud of your work and you will share with everybody that you helped to build Timo.

You’ll be joining a team of experts who are technically savvy, creative, and who share the intention of reinventing banking in Vietnam. You work closely with international architects and front-end consultants, product managers, and designers to develop the system. You will learn a lot from them.

• Define the infrastructure foundations behind one of Vietnam's leading digital banks
• Work alongside Kredivo Group's regional DevOps and Platform Engineering teams (Vietnam, Indonesia, Singapore)
• Set the technical bar for how Timo builds, deploys, and operates at scale
• Hybrid model: 4 days HCMC office, 1 day work from home