[GS] Cybersecurity - Penetration Test Engineer

The Bosch Group is a leading global supplier of technology and services. In 2013, its roughly 281,000 associates generated sales of 46.4 billion Euros. Since the beginning of 2013, its operations have been divided into four business sectors: Automotive Technology, Industrial Technology, Consumer Goods, and Energy and Building Technology. The Bosch Group comprises Robert Bosch GmbH and its roughly 360 subsidiaries and regional companies in some 50 countries. If its sales and service partners are included, then Bosch is represented in roughly 150 countries. This worldwide development, manufacturing, and sales network is the foundation for further growth BGSV - Bosch Global Software Technologies Company Limited is 100% owned subsidiary of Robert Bosch GmbH. BGSV has started its operations from 19th October, 2010 at e-Town2 in HCMC. This engineering development center will be engaged in developing embedded systems and software, mechanical design and simulation, and will provide IT (SAP Consulting, JAVA Development….) and Business Services (Finance and accounting, Economics, Purchasing, Logistics, Translations Japanese-English-Japanese, Information Security ) solutions to the Bosch group of companies globally. Global Business Services is a Bosch service unit providing end 2 end process services to Bosch internal organization. GS/TET-APAC the technical enabling team of GS APAC, we’re the engine of GS digital transformation by leading and implementing Smart Workflow, Digital Enabling, AI and Data Application Development, Cybersecurity Penetration and Consulting, ERP and SAP S/4 HANA project implementation, and UI/UX design. We work together with our business partners to escort, capture, conceptualize, implement, commercialize and operation digital initiatives in order to capitalize the power of digital innovation. We drive and lead the GS regional cross functional digital initiative incubation, project implementation, platform rollout and design of digital business models. Perform penetration testing to identify potential vulnerabilities in web systems, cloud services and IoT solutions using hacking attacks. Perform risk assessment for identified vulnerabilities to design detailed penetration test report. Present findings to relevant stakeholders and technical teams to introduce testing procedure, methodology and vulnerability risk severity in technical dimension. Investigate and analyze vulnerabilities on software systems, to design protection measures to mitigate cybersecurity risks. Investigate, research and evaluate security industry trends and best practices. More than 1 years of experience in penetration testing, familiar with the steps, methods and processes of penetration testing, with strong penetration testing and vulnerability mining capabilities. Familiar with WEB and APP security, understand WEB and APP security requirements, and able to independently conduct penetration testing on WEB, Android and iOS platforms; familiar with common security vulnerabilities and pitfalls of various operating systems and databases, familiar with OWASP Top 10 vulnerabilities, SQL injection, XSS, CSRF, etc., and familiar with the intrinsic principles of the vulnerabilities, detection methodologies, exploitation, and the corresponding solutions. Proficient in commonly used security tools such as BurpSuite, Nmap, Sqlmap, Kali Linux, etc., understanding the principles, familiar with the script code. Be able to independently complete the penetration testing of the company's related applications and servers, and propose solutions to related vulnerabilities. OSCP certified or equivalent qualification is preferred Good verbal and written communication skills in English. Further details regarding benefits will be shared during the interview process.