be Group

Tóm tắt công việc

OUR TECHSTACK

• Our core services consist hundreds of Golang microservices built around domain oriented, event driven architecture. All run on GCP, GKE, Istio with autoscaling, resiliency and chaos engineering mindset with full end to end observability.
• Our mobile platform was running on Flutter, component based, composable architecture. Web app largely on TypeScript, React, NextJS, Tailwind CSS and composable in-house design components and framework.
• Gitlab for all code repository, CI/CD, with Backstage as centralized developer productivity platform.
• Devops culture, you are fully responsible with design, build, and operate your own services with support from SRE, Platform team as needed
• Open source lover, and open source contributor. All tooling and platforms used was in-house custom built on popular open source projects

JOB RESPONSIBILITIES

• Periodically conduct commodity inspection and security assessment Information Security for the company’s system & applications
• Work closely with the Developer during the app-deploy process to consult & check the quality of the application’s information security.
• Research and implementation: Decompile software, study code to exploit faulty software.
• Check and review server system security, device security.
• Research new security holes, build information security solutions
• Participating in completing the processes of information security

Spirit

• Embraced engineering culture, and agile development.
• Accept failures, learn from it and move extremely fast.
• Flexible working environment, and performance-based optimization focus
• Ownership and excellent learning opportunity, in-house and external
• Be part of the team, who set the trend, influence and build meaningful product to millions of fellow Vietnamese

Benefits

• 13th salary
• Social Insurance
• Medical healthcare
• Annual health check
• 15 days annual leave
• Transportation fee (BE's services)
• Performance bonus
• Holiday bonus
• Team Building and many engagement activities

• Understanding of systems base, operating systems, networks system.
• Knowledge of vulnerabilities and attack techniques, web application exploitation (OWASP Top 10, SANS Top 25, OSSTMM, PTES…)
• Experience in the following areas:
  + Commodity Testing Web Application Import (Web Application Penetration Testing)
  + Application Mobile Testing (Mobile App Penetration Testing)
• Priority candidates have participated in Information Security Contests of e-commerce, banks, finance companies …
• Preferred candidates have participated in the CTF competition
• Having reported bugs on HackerOne, Bugcrowd… is an advantage
• Accepting fresher, priority is given to those who have been interns and collaborators in the respective field.