Zalo

Tóm tắt công việc

What you will do

• Design tests and tools to try to break into security-protected web-applications to probe for vulnerabilities;
• Use testing methods to pinpoint ways that attackers could exploit weaknesses in security web/app systems at Zalo;
• Test systems and applications using automated tools and manual methods (e.g. Burp Suite, Nessus, Nmap, and Metasploit);
• Document findings, write security reports, discuss solutions with Software teams and management, and provide feedback and verification after security fixes are issued;
• Maintain knowledge of the latest methods for ethical hacking and testing and always evaluating new penetration testing tools;
• Research new threats, attack vectors, and risk.

• Competitive salary package with 13th salary, annual performance-based bonus, and monthly lunch allowance

• Premium health care options for employees and their family

• Flexible working time and 14 days of paid annual leave

• Frequent events and activities: team building trip, monthly feast, social clubs, Zalo Birthday Celebration and New Year Party

• Top-class facilities: in-house canteen, 24/7 parking, fitness center, free-flow snacks & beverages, and shuttle bus

• Plus many other attractive benefits. Contact for the full Zalo Employee Benefit Program.

What you will need: 

• Love to be a member of "Red Team" & passionate in pentest;
• Experienced with programming using at least one of the following: PHP, Perl, Python, Ruby, Bash, C, or C++, including scripting and editing existing code;
• Experienced with one or more of the following: network vulnerability assessments, network penetration testing, red teaming, security operations, or hunt with focus on Web/App security testing;
• Experience with security tools, including Netsparker, Burp Suite Pro, Nessus, Nmap, and Metasploit;
• Knowledge of Web application technologies and their associated vulnerabilities;
• Profile bug bounty, public exploit, CVE, GitHub are plusses.