Senior IT Application Security

Perform advanced penetration testing on web applications, mobile applications, networks, and IT infrastructure.
Conduct manual and automated security testing.
Simulate real- world attack scenarios to evaluate the effectiveness of existing security controls.
Identify security vulnerabilities and assess their potential impact.

Document and report vulnerabilities along with comprehensive risk assessments and remediation recommendations.
Provide post- assessment debriefings to management and technical teams.
Develop detailed and structured penetration testing reports for stakeholders.

Evaluate and implement new tools and technologies to improve penetration testing capabilities.
Develop, maintain, and enhance automated security testing frameworks.

Develop and share knowledge on new attack vectors, techniques, and mitigation strategies.
Keep abreast of emerging threats, vulnerabilities, and industry best practices.

Assist in the development of security policies and procedures.
Work closely with PO, SRE, developers, and security teams to resolve identified vulnerabilities.
Participate in incident response and forensic analysis when required.

Yêu cầu công việcEducation & Experience

Proven track record of conducting successful penetration tests and identifying critical vulnerabilities.
Bachelor’s degree in computer science, Cybersecurity, Information Technology, or a related field.
Relevant certifications are highly preferred (e.g., OSCP, OSWE, CEH).
Hands- on experience with scripting languages (e.g., Python, Bash, PowerShell) to develop testing scripts.
Minimum of 3- 5 years of experience in penetration testing and vulnerability assessment.
Strong experience with penetration testing tools (e.g., Burp Suite, Metasploit, Nessus, Nmap, Kali Linux).

Strong analytical and problem- solving skills.
Proficient in analyzing and exploiting common vulnerabilities (e.g., SQL Injection, XSS, CSRF).
Excellent verbal and written communication skills.
Familiarity with secure coding practices and security testing methodologies (e.g., OWASP, NIST).
In- depth understanding of web, mobile, and network security principles.

Benefits

Social Insurance
13th salary
15 days annual leave
Team Building and many engagement activities
Medical healthcare
Holiday bonus
Annual health check
Transportation fee (BE&039;s services)
Performance bonus

Cập nhật gần nhất lúc: 2025-09-12 06:20:02