Penetration Tester

📍 Location: Ho Chi Minh City
ABOUT THE ROLE
At IPSIP, we help international businesses strengthen their security posture through professional IT and cybersecurity services.
We are looking for an experienced Penetration Tester who is passionate about offensive security and enjoys uncovering vulnerabilities beyond automated scan results. You will take an active role in security assessment engagements, applying your technical expertise to identify exploitable weaknesses, evaluate real-world risks, and provide actionable recommendations that help our customers build more resilient IT environments.
KEY RESPONSIBILITIES
Lead penetration testing engagements, including defining scope, establishing Rules of Engagement (RoE), and estimating project effort for customer quotations.
Conduct security assessments across web and mobile applications, APIs, OAuth/SaaS platforms, cloud environments, containers, servers, and IT infrastructure.
Perform advanced reconnaissance, identify attack vectors, and execute manual and automated security testing to uncover and validate vulnerabilities.
Assess exploitability and business impact, prioritize findings using rigorous CVSS scoring, and provide actionable remediation recommendations.
Prepare detailed penetration testing reports in English, including technical evidence and PoCs, ensuring sensitive information is properly redacted.
Support security incident investigations, technical analysis, and root-cause identification.
Work directly with customers and internal teams to communicate findings and recommend remediation strategies.
Provide technical guidance and coaching to junior penetration testers and contribute to improving testing methodologies and service quality.
WHAT WE'RE LOOKING FOR
At least 3 years of experience in Penetration Testing, Vulnerability Assessment, Application Security, or a related offensive security role.
Fluent in Vietnamese and confident communicating in spoken English.
Proven hands-on experience in penetration testing across web/mobile applications, APIs, and IT infrastructure.
Knowledge of API security, OAuth, SaaS applications, cloud environments, and container security.
Strong manual testing and exploitation skills, with a solid understanding of OWASP Top 10, CVEs, CVSS, and common attack techniques.
Good command of networking, TCP/IP, Linux, and commonly used penetration testing tools.
Ability to independently manage technical engagements, estimate testing effort, and produce high-quality technical reports in English.
Strong analytical, communication, and problem-solving skills, with the ability to guide junior team members.
Nice to have (but not required):
Relevant certifications such as OSCP, CPTS, or BSCP.
Experience working with international customers or within a cybersecurity service provider / MSSP environment.
Previous involvement in security incident investigations and root-cause analysis.
WHAT WE OFFER
Sponsorship for relevant technical certifications to support your career development.
Premium healthcare insurance.
Opportunities to work on international projects and assess diverse customer environments.
Continuous technical development through knowledge sharing, professional collaboration, and exposure to modern security technologies.
A friendly, collaborative working environment with free parking, coffee, and tea.
READY TO TAKE ON THE CHALLENGE?
Interested in making a real impact through offensive security?
Feel free to reach out to me directly for more details or share this opportunity with someone who might be a great fit.