Timo Vietnam

Tóm tắt công việc

We are looking for a Senior Offensive Security Engineer to join Kredivo Group's offensive security team, based at Timo in HCMC.

You will actively test and strengthen the defences behind Timo's digital banking platform, conducting penetration tests, simulating real-world attacks, and partnering with engineering teams to remediate vulnerabilities. Working closely with Kredivo Group's Information Security function, you will help raise the security bar across Timo's web, mobile, and infrastructure environments.

You will report to the Infosec Lead.

What You Will Do

• Conduct penetration tests and vulnerability assessments across Timo's infrastructure, web applications, and mobile apps.
• Simulate real-world attacks to identify weaknesses, assess impact, and prioritize remediation.
• Use industry-standard tools, such as Metasploit, Burp Suite, Nmap, and similar, to identify exploitable issues.
• Document findings clearly, produce detailed reports with risks, exploit paths, and recommended mitigations.
• Partner with the Engineering and Infrastructure teams to remediate vulnerabilities and embed secure practices.
• Integrate security testing into CI/CD pipelines to enable continuous security validation
• Build automation, develop scripts and tools (Python, PowerShell, or similar) to streamline offensive security operations.
• Stay ahead of emerging threats, research new attack techniques, tools, and defences.

Our deliverable is a leading software that is changing the way people do banking. You will be proud of your work and you will share with everybody that you helped to build Timo.

You’ll be joining a team of experts who are technically savvy, creative, and who share the intention of reinventing banking in Vietnam. You work closely with international architects and front-end consultants, product managers, and designers to develop the system. You will learn a lot from them.

• Define the infrastructure foundations behind one of Vietnam's leading digital banks
• Work alongside Kredivo Group's regional DevOps and Platform Engineering teams (Vietnam, Indonesia, Singapore)
• Set the technical bar for how Timo builds, deploys, and operates at scale
• Hybrid model: 4 days HCMC office, 1 day work from home

What We Are Looking For

Experience

• 4+ years in offensive security, penetration testing, or red teaming.
• Hands-on experience testing web applications, mobile applications, and cloud infrastructure.
• Comfortable working in agile, cross-functional environments.

Skills & Expertise

• Strong knowledge of penetration testing frameworks.
• Hands-on with industry-standard offensive tools.
• Experience identifying and exploiting vulnerabilities in Web, Mobile, Infrastructure layers.
• Proficient in scripting: Python, PowerShell, Bash, or similar.
• Familiarity with cloud security is preferred.
• Experience integrating security testing into CI/CD pipelines.
• Professional working English: regular collaboration with Kredivo's regional Information Security team and Timo's local engineering teams.