Mô tả công việc
In system development and operations projects, you will be responsible for end-to-end activities ranging from analyzing vulnerability assessment reports (SAST, DAST, penetration testing, etc.) and security/quality risks, to formulate remediation strategies and plans, as well as designing and executing validation test plans. This position goes beyond test execution. You will evaluate the business impact and risks of identified vulnerabilities and defects, propose remediation priorities, and establish effective validation and testing strategies.
- Analyze and triage vulnerability assessment reports (SAST, DAST, penetration testing results, etc.).
- Evaluate vulnerability severity and impact using industry standards such as CVSS and prioritize remediation activities.
- Develop remediation strategies and action plans, coordinate stakeholder alignment, and track execution progress.
- Review requirements specifications, design documents, and business process flows to identify security and quality risks.
- Define risk-based testing strategies and test plans.
- Create and review test perspectives, scenarios, and test cases to validate remediation effectiveness.
- Execute security testing, functional testing, integration testing, and regression testing.
- Prepare reports on remediation status, test results, and residual risks.
- Collaborate closely with development teams,
Project Managers (PMs),
Business Analysts (BAs), and security stakeholders.
Yêu cầu
Your Skills and Experience
- Minimum 5 years of experience in Software Testing or Quality Assurance (QA).
- Experience in security testing or analyzing vulnerability assessment results.
- Strong understanding of vulnerability severity and impact assessment methodologies (e.g., CVSS).
- Ability to review requirements and design documents and derive comprehensive test conditions and scenarios.
- Experience in creating remediation plans, test plans, and test cases.
- Hands-on testing experience with web applications or enterprise/business systems.
- Strong analytical and problem-solving skills, with excellent reporting and communication abilities.
Preferred Skills & Experience
- ISTQB Foundation or Advanced Level Test Analyst certification.
- Information security certifications such as Registered Information Security Specialist (RISS), CEH, or equivalent.
- Experience with SAST/DAST tools such as SonarQube, OWASP ZAP, Burp Suite, or similar.
- Knowledge of common web application vulnerabilities, including OWASP Top 10.
- Experience in API testing and SQL-based data validation.
- Practical experience in Agile development environments and risk-based testing approaches.
- Experience leveraging Generative AI tools (e.g., Microsoft Copilot) to improve productivity and operational efficiency.
Quyền lợi
- Competitive Salary
- Global Product Development (based on modern technology)
- Comprehensive Training (Training before working directly with clients, training activities of Japanese, English & seminar about trend technologies)
- Environment with growth career path
- Have the opportunity of Onsite in Japan and Asia
- Flexible Working Hours (In (7:00 - 9:00) - Out (16:00 - 18:00)
- Health Care: 24/7 health care package
- 13-month salary & project bonus (according to the company policy)
- Company activities (Quater Birthday, Company Trip, YEP) & volunteer activities
- Special Benefits (additional Leave-off for Leaders & long-term working members)
- Active Union Activity (Union Trip, outdoor activity and special bonus (New Year, 30/4, 2/9...)
Thông tin khác
Thời gian làm việc
Thứ 2 - Thứ 6 (từ 08:00 đến 17:00)
Thông tin chung
Nơi làm việc
- - Hồ Chí Minh: 253 Hoang Van Thu, Phường Tân Sơn Hòa (quận Tân Bình cũ)
Cách thức ứng tuyển
Ứng viên nộp hồ sơ trực tuyến bằng cách bấm nút Ứng tuyển bên dưới:
Hạn nộp: 02/08/2026
