Exchange Rate
Chat to Support
ភាសាខ្មែរ
JOB RESPONSIBILITIES
- Ensure secure and resilient web, mobile, and API applications through proactive penetration testing.
- Conduct application pentest for Wingmall including Web, APP, API
- Track task progress and completion status through regular status reviews.
- Ensure at least 90% completion of defined tactical security tasks within the planned timeline.
- Conduct security testing on demand projects
- Define and assign tactical security tasks with clear owners and deadlines.
- Track task progress and completion status through regular status reviews.
- Ensure early detection and validation of security vulnerabilities across web, mobile, and API applications.
- Perform both authenticated and unauthenticated penetration testing scenarios
- Validate identified vulnerabilities to eliminate false positives and confirm impact.
- Classify and prioritize vulnerabilities based on severity and business risk.
- Reduce application risk exposure by ensuring vulnerabilities are remediated within defined timelines.
- Assign remediation ownership and SLAs for all identified vulnerabilities
- Monitor remediation progress and report status regularly to stakeholders.
- Conduct retesting to confirm effective remediation and closure of vulnerabilities
- Enhance security testing capacity by implementing automated tools to quickly detect, report, and remediate vulnerabilities across applications and APIs
- Explore and evaluate automated security testing tools through Proof of Concept
- Implement the selected tool into the environment
JOB REQUIREMENTS
- Graduated bachelor degree of Information Technology, preferably in the field of Computer Science
- Completed or certified any security course like PenTest+, OSCP, OSWA, OSWE
- An adversarial mindset
- Self-learning any security related course or own lab development is advantaged
- Highly ethical, Curiosity, problem solving mentality, critical thinking, analytics kill and scepticism skill
- Understanding of the MITRE ATT&CK framework
- Understanding Cyber Kill Chain framework
- Understanding or knowledge of security product, Firewall, antivirus, and any other similar security solutions
- Understanding CVE, CWE, CPACE, CVSS
- Basic experience in penetration testing, security scanning.
- The related industry, understanding of company values & culture
- Good communication skills, both verbal and written English Excellence
- Having high level of confidentiality, integrity, and business ethic
- Ability to work under pressure and tight deadlines
- Be detail oriented
Support