ACG_3189_JOB
Our client is a leading consulting corporation in Vietnam, seeking experienced professionals to join their firm.
Conduct comprehensive vulnerability assessments, penetration tests, and adversarial attack simulations across diverse technologies, including but not limited to network systems, web platforms, mobile applications, thick client software, cloud environments, APIs, and operational technology.
Serve in a client-facing capacity to offer expert recommendations for addressing and mitigating identified security vulnerabilities and gaps.
Manage and lead a penetration testing team of 5 to 8 members, overseeing team establishment and operations in Hanoi.
Requirements
3 to 5 years of experience in cybersecurity roles, ideally within international consulting or cybersecurity organizations.
Strong knowledge of cybersecurity concepts such as networking, web development, and various vulnerability types, along with familiarity of industry standards including OWASP Top 10 and the MITRE ATT&CK framework.
Demonstrated interest in consulting with hands-on experience both internally and with clients.
Proficiency in programming and scripting languages like .NET, Python, Bash, and PowerShell.
Relevant certifications in cybersecurity or proven practical experience through Capture The Flag (CTF) challenges and bug bounty programs.
Eagerness to learn and adaptability to teaching environments.
Willingness to travel internationally when necessary.
Preferred Skills:
Expertise in security testing tools such as Nessus, Burp Suite, Frida, and dex2jar.
Offensive security certifications (e.g., OSCP, CRT) are highly desirable.
Experience in mobile application development and security testing.
Familiarity with red teaming tools, including Cobalt Strike, GoPhish, Sliver, and Brute Ratel.
Skilled in source code analysis using automated scanners like Checkmarx.
Background in reverse engineering and malware development.
Ability to perform static and dynamic code analysis.
Experience working in varied security testing environments utilizing jump hosts, VPNs, and conducting assessments on AWS, Azure, and GCC infrastructures in onsite or remote setups.
A proactive self-learner capable of delivering professional cybersecurity services while contributing to local skill development.
Contact: Hieu Nguyen
Due to the immense number of applications, only shortlisted candidates will be contacted.