Penetration Tester (Junior)

Location:
Sala Area, HCMC
ABOUT US:
IPSIP delivers offensive and defensive cybersecurity services to organizations worldwide. Our Offensive Security team specializes in Penetration Testing and Red Team engagements, simulating real-world attacks against web, API, cloud, network, and enterprise environments to uncover critical security weaknesses and improve cyber resilience.
RESPONSIBILITIES:
Support penetration testing and vulnerability assessments for web applications, APIs, servers, websites, and IT infrastructure.
Conduct information gathering, asset discovery, and reconnaissance according to project requirements.
Perform vulnerability discovery using automated tools and manual testing techniques.
Validate vulnerabilities through authorized and controlled testing, collecting clear evidence and reproduction steps.
Analyze scan results, identify false positives, and escalate high-risk findings for review.
Prepare technical report content covering vulnerabilities, evidence, impact, risk ratings, and remediation recommendations.
Conduct re-testing to verify whether vulnerabilities have been properly remediated.
Maintain accurate documentation and follow established methodologies, scope, and rules of engagement.
REQUIREMENTS:
0-2 years of experience in Penetration Testing, Vulnerability Assessment, Application Security, SOC, IT Security, or a related field.
Basic hands-on experience with web applications, APIs, servers, or IT infrastructure security testing.
Understanding of OWASP Top 10, authentication and authorization issues, injection, XSS, IDOR/BOLA, CVEs, and security misconfigurations.
Familiarity with tools such as Burp Suite, Nmap, Nessus, OpenVAS, Nikto, ffuf, Gobuster, or equivalent.
Good understanding of networking fundamentals, HTTP/HTTPS, DNS, TCP/IP, Linux, and common web technologies.
Ability to perform basic reconnaissance, vulnerability validation, evidence collection, and technical documentation.
Basic scripting knowledge in Python, Bash, PowerShell, or equivalent is an advantage.
Strong willingness to learn, receive feedback, work in a team, and read technical documentation in English.
BENEFITS:
100% sponsorship for relevant technical certifications and professional training.
Premium healthcare insurance.
Opportunity to work on international projects
Continuous learning through technical mentoring, knowledge sharing, and exposure to modern technologies.
Free parking, coffee, and tea.
📌 Send your CV to: [protected info]
📌 Zalo: [protected info]
Let's connect. I'm happy to discuss more.