Penetration Tester (Middle, Senior, and Lead) | Up to 4500USD | Ho Chi Minh/ Ha Noi (Hybrid)

We're hiring Penetration Testing professionals to help secure web, mobile, API, infrastructure, and cloud environments for one of Australia's largest banking organisations, working on real-world security challenges in a global engineering environment.

We’re particularly interested in Vietnamese cybersecurity professionals with strong technical capabilities and excellent English communication skills. Candidates from local Vietnamese banks are welcome, and international candidates with relevant experience will also be considered.

Why these roles

This is more than running automated scans and producing vulnerability reports. You’ll have the opportunity to:

• Conduct hands-on penetration testing across web applications, mobile applications, APIs, infrastructure, and cloud environments.
• Identify and validate security vulnerabilities, from authentication and access control weaknesses to injection and business logic flaws.
• Work with development, DevOps, infrastructure, and security teams to clarify risks and support remediation.
• Contribute to security testing throughout the software development lifecycle, including threat analysis, test planning, release validation, and retesting.
• For senior and lead candidates, take greater ownership of testing delivery, technical reviews, mentoring, and stakeholder communication.
• Strengthen your experience in cybersecurity within an international banking environment.

What you’ll work with

• Application and API security: OWASP Top 10, OWASP API Security Top 10, authentication, authorization, session management, and business logic vulnerabilities.
• Mobile security: iOS and Android testing, secure storage, certificate pinning, authentication, and secure communications.
• Infrastructure and cloud security: Network services, servers, operating systems, access controls, misconfigurations, and cloud environments across AWS, Azure, or GCP.
• Security testing tools: Burp Suite, OWASP ZAP, Nmap, Nessus, Metasploit, Wireshark, Postman, MobSF, or equivalent tools.

About you

• You have solid hands-on experience in penetration testing, vulnerability assessment, ethical hacking, or application security testing.
• You understand common web and API vulnerabilities and can independently validate findings rather than relying solely on automated scan results.
• You can assess exploitability, determine business impact, and recommend practical remediation measures.
• You have experience testing applications, APIs, mobile platforms, infrastructure, or cloud environments, depending on your area of expertise.
• You can produce clear, structured security reports with technical evidence, risk ratings, business impact, and remediation guidance.
• For Senior and Lead positions, you can independently manage testing activities, coordinate delivery, review findings, and communicate effectively with stakeholders. Lead candidates should also be comfortable mentoring other security professionals.
• You have a strong sense of ownership, attention to detail, and the ability to manage multiple testing activities in parallel.
• You communicate fluently and confidently in English, with the ability to explain technical findings and discuss security risks with international clients and technical teams.

Experience in banking, financial services, or other regulated environments is valuable, but strong candidates from cybersecurity consulting, technology services, fintech, and other relevant industries are also encouraged to apply.

We’d love to hear from you. For a confidential, no-pressure chat, message Zen directly.