ACG_2437_JOB
Our client is a top-notch technology company who is looking for a qualified candidate to join their firm.
- Be able to conduct the advanced manual application penetration tests.
- Ability to build tools and internal applications to discover, evaluate and mitigate security vulnerabilities during development and in production.
- Participate in design, source code review, and testing of new application security features and controls across products.
- Automate the security penetration testing cases/exploits and ensure they get deployed in a production environment.
- Validate and champion secure development practices for software engineers.
- Advancing your personal knowledge of information security to stay on the bleeding edge.
- Research and make recommendations to the development team regarding security standards.
Requirements
- Bachelor’s degree in Computer Science, Computer Engineering, Information Systems, or related field and/or 3+ years of equivalent work experience required.
- Knowledge of the methods, processes, and procedures to execute penetration testing.
- Solid understanding of web application development.
- Experience reviewing source code (Java, Python) and Mobile applications (Native, KMM)
- Experience in cloud security (AWS).
- Knowledge of web & mobile application security principles with significant understanding of application security topics such as OWASP Top 10 and authentication infrastructure (SAML, OAUTH).
- Experience in the Security planning, coordinating, executing, and reporting of tasks.
- Good communication skills with an ability to explain complex technical issues to non-technical business users.
- Holders of security related certifications like GWAPT/ OSWE, etc. will be an advantage.
Contact: Thuy Dung Nguyen, Oanh Phung
Due to the immense number of applications, only shortlisted candidates will be contacted.