Senior Penetration Tester - Banking Security (Hybrid)

GFT Technologies SE; Jakarta Pusat; Híbrido; IDR 1.610.018.000 - 2.325.581.000; Jornada completa

Descripción de la vacante

GFT Technologies SE is seeking a Senior Penetration Tester with open relocation to Vietnam. Hybrid working is offered, and international candidates are welcome to relocate.

The role involves assessing the security of banking apps, APIs, cloud platforms, and infrastructure, identifying vulnerabilities, and supporting remediation with cross-functional teams. You will perform security assessments across web, mobile, API, network, and cloud environments, using industry tools and best practices to

Formación

• Hands-on testing across web, mobile, API, network, and cloud.
• Strong banking domain knowledge.
• Knowledge of OWASP Top 10 and API security.
• Experience securing banking workflows.

Responsabilidades

• Penetration tests across web, mobile, APIs, cloud, and banking platforms.
• Identify, document vulnerabilities with risk ratings and remediation guidance.
• Produce security reports with evidence and remediation recommendations.
• Collaborate with engineering and security teams to remediate findings.
• Support security activities throughout the SDLC and retesting.
• Perform vulnerability assessments and validate fixes.
• Assist audits with security evidence and tracking.
• Stay updated on threats and security best practices.

Conocimientos

Penetration testing

Ethical hacking

Vulnerability assessments

Banking systems

API security

OWASP Top 10

iOS/Android testing

Cloud security

Security reporting

Remediation collaboration

Herramientas

Burp Suite

OWASP ZAP

Nmap

Nessus

Metasploit

Wireshark

Postman

MobSF

Descripción del empleo

GFT Technologies SE is seeking a Senior Penetration Tester with open relocation to Vietnam. Hybrid working is offered, and international candidates are welcome to relocate.

The role involves assessing the security of banking apps, APIs, cloud platforms, and infrastructure, identifying vulnerabilities, and supporting remediation with cross-functional teams. You will perform security assessments across web, mobile, API, network, and cloud environments, using industry tools and best practices to