Pentester Automation

Description
GoTyme is a multi-country digital banking group with global ambitions, building simple and trusted money tools that help more people access financial services. We serve 23M+ customers through 2,000+ employees across seven locations: South Africa, the Philippines, Singapore, Hong Kong, Indonesia, India, and Vietnam.
GoTymeX is GoTyme's Technology and Product Development Hub, building the engine behind the business. Our engineers, data scientists, product managers, and architects create and scale the platforms, products, and experiences that power GoTyme across markets.
Visit our website
About the role
Are you ready to take your career up a level? We are seeking a Penetration Tester - Automation Engineer with exceptional security testing expertise, strong automation and programming skills, and proven ability to scale application security assessments through innovative tooling and automation.
The selected candidate will be responsible for conducting advanced security testing for our banking applications, reviewing and providing security feedback during the application design phase, and building automation frameworks to scale penetration testing operations and accelerate vulnerability discovery across our application portfolio.
What you will do
Security Testing & Assessment
Conduct advanced automated application penetration tests on web applications, mobile applications, and APIs.
Participate in source code reviews, and testing of new application security features and controls across products.
Validate and champion secure development practices for software engineers.
Research and make recommendations to the development team regarding security standards.
Advance your personal knowledge of information security to stay on the bleeding edge.
Security Automation & Scaling
Build tools and internal applications to discover, evaluate and mitigate security vulnerabilities during development and in production at scale.
Automate security penetration testing processes, exploits and test cases to enable rapid, repeatable assessments across multiple applications/features.
Develop frameworks and scripts to accelerate common penetration testing workflows and reduce manual effort.
Create automated vulnerability validation and verification tools.
Build integrations between security testing tools and development/deployment pipelines.
Design and implement solutions for continuous security testing in production environments.
Develop custom security scanning and analysis tools tailored to banking application architectures.
Requirements
Who are we looking for
Required
Bachelor's degree in Computer Science, Computer Engineering, Information Systems, Information Security, or related field and/or 3+ years of equivalent work experience required.
Knowledge of the methods, processes, and procedures to execute penetration testing.
Strong programming and scripting abilities (Python, Java, or similar) for security tool development.
Hands-on experience building security automation tools from concept to production deployment.
Solid understanding of web application development.
Experience using AI to enhance security testing and develop supporting scripts.
Experience reviewing source code (Java, Python) and mobile applications (Native, KMM).
Experience in cloud security (AWS).
Knowledge of web & mobile application security principles with significant understanding of application security topics such as OWASP Top 10 and authentication infrastructure (SAML, OAUTH).
Experience in security planning, coordinating, executing, and reporting of tasks.
Good communication skills with an ability to explain complex technical issues to non-technical business users.
Nice to have
Holders of security related certifications like GWAPT/OSWE, etc. will be an advantage.
Working model/location
We follow a hybrid working model, based out of our office in VN. Flexible working arrangements are available for discussion.
Benefits
What we will offer
Competitive rewards: Performance-based bonus, a pro-rated 13th-month salary, and eligibility for the Share Ownership Program participation in GoTyme Group.
Benefits from day one: Full salary and benefits during probation, meal and parking allowances, insurance in line with Vietnamese labor law, and premium healthcare coverage for you and your family, with no seniority requirement.
Time to recharge: 15 days of annual leave, 3 sick days, 1 birthday leave, and 1 Christmas leave.
Room to grow: SMART goals and clear career opportunities, with access to technical seminars, conferences, and career talks.
International exposure: A values-driven, agile working environment, with opportunities to travel overseas for training and work.
A connected team: Internal hackathons and company events, including Town Hall, company trip, etc.
Disclaimer
We receive a high volume of applications, so we may not be able to respond to every candidate individually. If your profile matches our requirements, our team will contact you to discuss next steps.
Information shared during the recruitment process, including interview materials and case studies, is confidential to GoTymeX. We ask that candidates respect this and do not share it publicly or with third parties.
GoTymeX does not charge candidates any fees at any stage of the recruitment process.
GoTymeX will only contact candidates through official [protected info] email addresses. Please stay alert to messages, emails, or websites impersonating our company.