Junior Pentest Engineer

As a Junior Pentest Engineer, you will work closely with senior security engineers, customers, and technology vendors to assess security risks and identify vulnerabilities across IT infrastructure, applications, and systems.

Your key responsibilities include:

• Perform vulnerability assessment and penetration testing for networks, systems, applications, and security infrastructure under the guidance of senior engineers.

• Conduct security assessment activities such as:

+ Network and infrastructure penetration testing

+ Web application security testing

+ Vulnerability scanning and validation

+ Configuration and security assessment

+ Basic endpoint and security solution assessment

• Use penetration testing and vulnerability assessment tools such as Nmap, Burp Suite, Nessus/OpenVAS, Metasploit, Wireshark, Kali Linux, or equivalent tools.

• Identify, validate, analyze, and document security vulnerabilities and potential attack vectors.

• Support senior engineers in developing Proof of Concept (PoC) for identified vulnerabilities.

• Assist in security testing for customer environments and help troubleshoot technical security issues.

• Perform basic security hardening recommendations and support customers in remediation activities.

• Prepare technical reports, test results, vulnerability findings, and other project-related documentation.

• Participate in POC, solution testing, deployment, and optimization of cybersecurity solutions.

• Coordinate with technology vendors when technical support or troubleshooting is required.

• Present testing results and technical findings to internal teams and customers when required.

• Continuously research new vulnerabilities, attack techniques, security tools, and cybersecurity trends.

Education & E

Yêu cầu công việc

Education & Experience

• Bachelor’s degree in Information Technology, Cybersecurity, Information Security, Computer Science, Telecommunications, or related fields.

• 0–2 years of practical experience in penetration testing, vulnerability assessment, cybersecurity, system/network administration, or a related field.

• Fresh graduates with strong cybersecurity knowledge, hands-on labs, CTF experience, internships, or relevant certifications are welcome to apply.

• Basic understanding of networking and security concepts, including:

+ TCP/IP

+ DNS

+ HTTP/HTTPS

+ SSL/TLS

+ VPN

+ Firewalls and security controls

• Basic knowledge of Linux and Windows environments.

• Familiarity with common penetration testing methodologies and security concepts.

• Hands-on experience with tools such as Kali Linux, Nmap, Burp Suite, Nessus/OpenVAS, Metasploit, Wireshark, or equivalent is an advantage.

• Basic understanding of common vulnerabilities such as OWASP Top 10, authentication/authorization issues, injection, XSS, misconfiguration, and privilege escalation.

• Basic scripting knowledge in Python, Bash, or PowerShell is preferred.

• English proficiency equivalent to TOEIC 550+ or IELTS 5.0+.

• Good analytical and problem-solving skills.

• Strong willingness to learn and develop a career in cybersecurity.

• Good teamwork, communication, and customer-oriented mindset.

Quyền lợi

• Thưởng: Performance-based bonus according to the quality and completion of assigned responsibilities.
• Đào tạo: Opportunities to participate in local and overseas technical training and certification programs.
• Khác: Professional, collaborative, and supportive working environment. Opportunities to work with leading cybersecurity technologies and international vendors. Competitive benefits and other employee welfare policies in accordance with company regulations.