Mô tả công việc
Tóm tắt công việc
What this role owns: Hands-on security for mobile apps and web services. You run penetration tests, review source code, build threat models, and produce actionable fixes that engineers can implement. You also create standards, automate tests in CI, and run training for engineering teams.
Key Responsibilities
Perform penetration tests for mobile and web applications.
Review code to identify security vulnerabilities and recommend fixes.
Develop threat models for new features and workflows.
Analyze application flows and identify attack vectors (tampering, hooking, jailbreak/root bypass, emulator detection, etc.).
Research emerging vulnerabilities, exploit techniques, and tools.
Document findings and deliver clear remediation guidance to engineering teams.
Support post-incident analysis and root-cause reviews.
Build internal security guidelines and secure coding standards.
Train engineering teams on security best practices and secure SDLC.
We are passion with new technologies, not follow the old-track of outsourcing. We love our product and ready to sacrifice everything for it! You often argue with your boss? Don't worry, here in M_Service, you will get salary increase if you win your boss in argument. We love objection!!! You hate company trip in hotel, resort? We only conquer difficult and hottest road in team building. Do you want to join?
What you will get:
Competitive compensation package.
Performance-based bonus.
Insurance package.
Chance to work with smart people with international experience.
Our benefits:
Attractive compensation & benefits.
13th month salary bonus and yearly performance bonus.
14 paid days off per year
Premium health care insurance
Great allowances (lunch, parking, birthday, happy hours....)
Salary review at least one time per year based on employee's performance and contribution.
Outing/team-building activities (company trip , soccer sport, english club, running club,..).
Other benefits as per stated in Vietnamese Labor Law
Work with experienced & strong team.
Friendly, dynamic & flexible working environments.
Yêu cầu
Requirements
Bachelor's degree in Information Security, Computer Science, or related field.
Proven experience in application penetration testing (mobile + web).
Practical source code review experience and secure coding knowledge.
Hands-on experience with testing frameworks such as the PTES and OWASP
In-depth knowledge of application development processes and at least one programming or scripting language (e.g., Java, Scala, C#, Ruby, Perl, Python, PowerShell)
Passion to learn and explore.
Preferred
Experience with exploit development, vulnerability research or fuzzing.
Fintech or payment industry security experience.
Thông tin khác
Java
Python
Penetration testing
C#
Information Security
PowerShell
Perl
Ruby
Scala
OWASP
Fintech
PTES
Thông tin chung