
Penetration Tester
Life at Viettel Cyber Security • Ho Chi Minh City, Vietnam
-
Role & seniority
-
Penetration Tester (experienced; ~2+ years)
-
Department: Sec Dept / Security
-
-
Location & work type
-
Hanoi, Ho Chi Minh City
-
Full-time
-
-
Stack / tools (from posting)
-
Secure application programming for web apps
-
Black-box penetration testing
-
Webshells and detection methods
-
Development of exploitation payloads (incl. 1-day payloads)
-
Application assessment: white-box & black-box processes
-
Programming frameworks (one or more; not specified)
-
-
Top 3 responsibilities
-
Perform IS assessments for large/complex/multi-platform applications (incl. black-box, and knowledge of white-box process)
-
Analyze vulnerabilities (1-day/known) and write exploitation payloads
-
Research and test new/0-day vulnerabilities and techniques; support knowledge sharing (seminars/blogs), plus incident handling and security training
-
-
Must-have skills
-
2+ years of penetration testing
-
Strong knowledge of application vulnerabilities and exploitation techniques
-
Ability to code for security work (at least one programming framework)
-
Understanding of protection/prevention mechanisms and payload analysis
-
Knowledge of webshells and how to detect them
-
Ability to conduct black-box penetration tests
-
-
Nice-to-haves
-
Security certifications: OSCP, OSEP, OSWE (or similar)
-
Participation in IS community; involvement in dril
-
Full Description
POSTED AT 21/08/2025 17: 11:32
Penetration Tester
Department
Sec Dept
Location
Hanoi, Ho Chi Minh City
Employment type
Full-time
Work experience
Experienced
End date
Application until 31/12/2026
Security
Overview
Viettel Cyber Security (VCS) is a leading cyber security firm, dedicated to protecting digital infrastructures worldwide while conducting in depth research and analysis for security solutions. Leveraging 100% in house development, VCS offers a comprehensive range of cutting-edge cyber security solutions, protecting governments, financial institutions, large corporations and SMEs against sophisticated cyber threats in the digital age.
VCS is internationally recognized for its Champion titles at Pwn2Own 2023 & 2024, consistent Top 5 global rankings, the discovery of400+ zero-day vulnerabilities, and multiple prestigious honors, including Gold – Best Cyber Security Company in Asia.
Responsibilities
– Conduct Information Security (IS) assessments for large, complex, or multi-platform applications
– Develop security guidelines by researching platforms, technologies, and existing vendor documentation
– Provide IS training (awareness, secure coding, secure configuration) for clients
– Handle IS incidents
– Analyze 1-day vulnerabilities and write exploitation payloads
– Research 0-day vulnerabilities, new exploitation techniques, and new technologies. Publicly share findings through company seminars and blogs
– Participate in the IS community
– Join internal or external drills and corporate CTF (Capture The Flag) events
Qualifications
– 2+ years of experience in Penetration Testing
– Knowledge of secure application programming for web applications
– A solid grasp of application vulnerabilities and exploitation techniques
– Understanding and proficiency in programming with one or more programming frameworks
– Knowledge of webshells and detection methods
– Knowledge of protection and prevention mechanisms, and an understanding of how to analyze and build 1-day payloads
– Ability to perform a black-box penetration test on a system
– Knowledge of the web application white-box and black-box assessment process
– Preference for candidates with IS certifications like OSCP, OSEP, OSWE, etc
– Bachelor’s degree in Information Technology, Information Security, Computer Science, Mathematics-Informatics or related IT fields
Benefits & perks
Competitive annual total income package Annual salary review in March Bao Viet health and personal accident insurance Annual health check-up Special support for female employees during maternity leave. Awards recognizing performance and timely outstanding contributions 100% sponsorship for in-depth international professional certification based on position (in case of unsuccessful attempt, don’t worry, VCS will support 50% of the exam fee), special bonuses for employees achieving international professional certifications Continuous investment in the latest and most up-to-date learning materials in the field of Information Security from leading global vendors and institutes 100% of employees are provided with an Udemy eLearning account – learn anytime, anywhere Free participation in professional knowledge sharing programs and seminars from leading domestic and international speakers. Opportunity to work with diverse domestic and international clients Working in a Grade A office – Landmark 72 building with a green space complex and a private area for gym and entertainment (billiards, PES, café, reading, Pingpong)
30-minute relaxation daily with Happy hours (4: 00 PM – 4:30 PM)
Sports activities: Swimming, Pickleball, Billiards, Poker, PES, etc. Twelve (12) days of annual leave according to Labor Law, three (3) days of company vacation and one (1) traditional holiday on 22/12.
Personal birthday celebrations: Gifts and birthday cake from the Company
Gift and participation in company events: Quarterly team building activities, monthly birthday celebrations, Year End Party, vacations, International Women’s Day (March 8th), Vietnamese Women’s Day (October 20th) (female employees receive ½ day off), Viettel Group birthday on June 1st, etc Care parents and children of employees on special occasions.
APPLICATION FORM
APPLY THIS JOB
Please enable JavaScript in your browser to complete this form.
Please enable JavaScript in your browser to complete this form.
Full name *
Email *
Phone number *
LinkedIn/GitHub
Portfolio
Send form *
Website / URL *
Agree to Personal Data Protection Policy
In accordance with the provisions of the Law on Protection of Personal Data No. 91/2025/QH15 dated June 26, 2025, by checking the boxes below, the Candidate confirms that they have read, understood, and agree to allow Viettel Cyber Security One Member Limited Liability Company (VCS) to process their personal data for each specific purpose stated below. If the Candidate does not agree, we regret that we cannot process the application. The Candidate may withdraw their consent at any time through Customer Service channels, including the hotline +84 382 360 360 or email vcs.care@viettel.com.vn.
Acceptance of the purposes for processing the Candidate's personal data and our Statement on Processing and Protection of Personal Data of Recruitment Candidates: *
- Executing the full recruitment and onboarding cycle: from screening, background checks, and assessments to contract finalization, talent pool management, and internal reporting.
View our Personal Data Protection Policy
Related jobs
Security Content Analyst
Hanoi
Ho Chi Minh City Experienced
View detail Security Content Analyst
RedTeam
Hanoi
Experienced
View detail RedTeam
AI ENGINEER – GEN AI
Hanoi
Senior
View detail AI ENGINEER – GEN AI
Pentest Manager
Hanoi
Experienced
View detail Pentest Manager
AI RESEARCH
Hanoi
Senior
View detail AI RESEARCH
Network Security Audit
Hanoi
Ho Chi Minh City Experienced
View detail Network Security Audit
View more jobs