JOB DESCRIPTION
Perform Web/API/Mobile penetration testing, identify vulnerabilities, build proof-of-concepts (PoC), and propose remediation solutions.
Collaborate with development teams to embed security throughout the SDLC, including early-stage design reviews and threat modeling
Participate in implementing SAST/DAST/SCA solutions within CI/CD pipelines.
Stay up to date on emerging attack techniques, assess risks, and propose preventive measures.
Support information security assurance for systems and development environments.
REQUIREMENTS
At least 1 year of experience in Web/API penetration testing (Web application experience preferred).
Solid understanding of OWASP Top 10, OWASP ASVS, and OWASP MSTG.
Hands-on experience with Burp Suite/ZAP, Nmap, SQLMap, ffuf, Nuclei,....
Basic programming knowledge (PHP/Java/JavaScript/Python, etc.), Linux, Windows, Docker, and computer networking.
Basic understanding of authentication/authorization security (OAuth2, JWT) and threat modeling concepts
Security certifications such as OSCP, CEH, etc., is an advantage.
BENEFITS
Minimum 13 months salary per year - not including other bonuses such as KPI bonus for work efficiency, project bonus and revenue bonus. We do performance review twice a year. You will work in a professional, dynamic and friendly environment.
VTI offer annual health check-ups and fully pay social insurance, health insurance and unemployment insurance premium following the Labor law.
We offer one vacation/company trip and 4 teambuilding trips per year for every employees, along with various entertainment activities including: Swimming Clubs, Yoga, Zumba, Kendo and music order via internal Radio channel.
Two MVPs will be rewarded with a free trip to Japan, Taiwan, Singapore, or else.
We offer variety promotion opportunities and chance to raising income for people with capacity, enthusiasm, and long-term commitment.
We offer free Japanese class at the company.
We provide training opportunities to help our people to improve their skills. We support our members to learn and get Cloud, AWS, PMF, PMP certification.
Working hour from: 08:30am to 05:30pm. From Monday to Friday.
