{"id":15554,"date":"2026-08-24T16:18:11","date_gmt":"2026-08-24T09:18:11","guid":{"rendered":"https:\/\/galaxyholdings.co\/?post_type=job&#038;p=15554"},"modified":"2026-08-24T16:18:11","modified_gmt":"2026-08-24T09:18:11","slug":"truong-nhom-kiem-thu-xam-nhap-ung-dung-web-api-va-ai","status":"publish","type":"job","link":"https:\/\/galaxyholdings.co\/en\/job\/truong-nhom-kiem-thu-xam-nhap-ung-dung-web-api-va-ai\/","title":{"rendered":"Tr\u01b0\u1edfng nh\u00f3m Ki\u1ec3m th\u1eed X\u00e2m nh\u1eadp \u1ee8ng d\u1ee5ng Web &#038; API v\u00e0 AI"},"content":{"rendered":"<p><span style=\"font-size: 18pt; color: #0000ff;\"><strong>T\u1ed5ng quan v\u1ecb tr\u00ed:<\/strong><\/span><\/p>\n<ul>\n<li>D\u1eabn d\u1eaft n\u0103ng l\u1ef1c ki\u1ec3m th\u1eed x\u00e2m nh\u1eadp (Offensive Security) cho to\u00e0n b\u1ed9 \u1ee9ng d\u1ee5ng Web, API, Mobile-backend v\u00e0 \u1ee9ng d\u1ee5ng t\u00edch h\u1ee3p AI\/LLM c\u1ee7a C\u00f4ng ty\/C\u00f4ng ty th\u00e0nh vi\u00ean.<\/li>\n<li>X\u00e2y d\u1ef1ng v\u00e0 v\u1eadn h\u00e0nh m\u00f4 h\u00ecnh ki\u1ec3m th\u1eed li\u00ean t\u1ee5c (CTEM\/PTaaS): k\u1ebft h\u1ee3p ki\u1ec3m th\u1eed th\u1ee7 c\u00f4ng chuy\u00ean s\u00e2u v\u1edbi t\u1ef1 \u0111\u1ed9ng h\u00f3a v\u00e0 t\u00edch h\u1ee3p v\u00e0o CI\/CD theo m\u00f4 h\u00ecnh DevSecOps.<\/li>\n<li>Th\u1ef1c hi\u1ec7n v\u00e0 \u0111i\u1ec1u ph\u1ed1i ki\u1ec3m th\u1eed x\u00e2m nh\u1eadp tr\u00ean m\u00f4i tr\u01b0\u1eddng \u1ee9ng d\u1ee5ng Web\/API, h\u1ea1 t\u1ea7ng cloud-native (Container, Kubernetes, Serverless) v\u00e0 chu\u1ed7i cung \u1ee9ng ph\u1ea7n m\u1ec1m.<\/li>\n<li>Chuy\u1ec3n h\u00f3a k\u1ebft qu\u1ea3 ki\u1ec3m th\u1eed th\u00e0nh khuy\u1ebfn ngh\u1ecb gi\u1ea3m thi\u1ec3u r\u1ee7i ro cho Blue Team\/SOC v\u00e0 c\u00e1c nh\u00f3m ph\u00e1t tri\u1ec3n; ch\u1ee7 tr\u00ec ho\u1ea1t \u0111\u1ed9ng Purple Team.<\/li>\n<li>Chu\u1ea9n h\u00f3a ph\u01b0\u01a1ng ph\u00e1p lu\u1eadn (OWASP WSTG\/ASVS, PTES, NIST SP 800-115), quy tr\u00ecnh v\u00e0 b\u1ea3o \u0111\u1ea3m tu\u00e2n th\u1ee7 ISO\/IEC 27001:2022, PCI DSS 4.x, Lu\u1eadt An ninh m\u1ea1ng v\u00e0 Lu\u1eadt B\u1ea3o v\u1ec7 d\u1eef li\u1ec7u c\u00e1 nh\u00e2n s\u1ed1 91\/2025\/QH15.<\/li>\n<li>Qu\u1ea3n l\u00fd ngu\u1ed3n l\u1ef1c, ph\u00e1t tri\u1ec3n \u0111\u1ed9i ng\u0169 v\u00e0 b\u00e1o c\u00e1o m\u1ee9c \u0111\u1ed9 ph\u01a1i nhi\u1ec5m r\u1ee7i ro \u1ee9ng d\u1ee5ng cho Ban l\u00e3nh \u0111\u1ea1o.<\/li>\n<\/ul>\n<p><span style=\"font-size: 18pt; color: #0000ff;\"><strong>M\u00f4 t\u1ea3 c\u00f4ng vi\u1ec7c:<\/strong><\/span><\/p>\n<ol>\n<li><strong> X\u00e2y d\u1ef1ng v\u00e0 v\u1eadn h\u00e0nh n\u0103ng l\u1ef1c ki\u1ec3m th\u1eed t\u1ef1 \u0111\u1ed9ng h\u00f3a \u2013 li\u00ean t\u1ee5c<\/strong><\/li>\n<\/ol>\n<ul>\n<li>Tri\u1ec3n khai, v\u1eadn h\u00e0nh n\u1ec1n t\u1ea3ng v\u00e0 b\u1ed9 c\u00f4ng c\u1ee5 ki\u1ec3m th\u1eed (Burp Suite Professional\/Enterprise, ZAP, Nuclei, SAST\/DAST\/SCA\/IAST).<\/li>\n<li>T\u00edch h\u1ee3p ki\u1ec3m th\u1eed b\u1ea3o m\u1eadt v\u00e0o CI\/CD pipeline (shift-left), qu\u1ea3n l\u00fd SBOM v\u00e0 r\u1ee7i ro chu\u1ed7i cung \u1ee9ng ph\u1ea7n m\u1ec1m.<\/li>\n<li>Nghi\u00ean c\u1ee9u CVE m\u1edbi, vi\u1ebft PoC\/m\u00e3 khai th\u00e1c, ph\u00e1t tri\u1ec3n c\u00f4ng c\u1ee5 n\u1ed9i b\u1ed9 (Python\/Go) v\u00e0 t\u1ef1 \u0111\u1ed9ng h\u00f3a quy tr\u00ecnh ki\u1ec3m th\u1eed.<\/li>\n<li>\u1ee8ng d\u1ee5ng AI\/LLM \u0111\u1ec3 t\u0103ng t\u1ed1c ph\u00e2n t\u00edch v\u00e0 so\u1ea1n b\u00e1o c\u00e1o, \u0111\u1ed3ng th\u1eddi ki\u1ec3m so\u00e1t r\u1ee7i ro r\u00f2 r\u1ec9 d\u1eef li\u1ec7u khi s\u1eed d\u1ee5ng AI.<\/li>\n<li>T\u01b0 v\u1ea5n c\u1ea5p tr\u00ean v\u1ec1 c\u00f4ng ngh\u1ec7, gi\u1ea3i ph\u00e1p an to\u00e0n \u1ee9ng d\u1ee5ng m\u1edbi cho c\u00e1c \u0111\u01a1n v\u1ecb trong h\u1ec7 sinh th\u00e1i.<\/li>\n<\/ul>\n<ol start=\"2\">\n<li><strong> Ki\u1ec3m th\u1eed x\u00e2m nh\u1eadp \u1ee9ng d\u1ee5ng Web, API v\u00e0 \u1ee9ng d\u1ee5ng t\u00edch h\u1ee3p AI<\/strong><\/li>\n<\/ol>\n<ul>\n<li>Ki\u1ec3m th\u1eed th\u1ee7 c\u00f4ng chuy\u00ean s\u00e2u theo OWASP WSTG\/ASVS: l\u1ed7i logic nghi\u1ec7p v\u1ee5, IDOR\/BOLA, race condition, SSRF, deserialization, HTTP request smuggling, t\u1ea5n c\u00f4ng ph\u00eda client.<\/li>\n<li>Ki\u1ec3m th\u1eed API (REST\/GraphQL\/gRPC\/Webhook) theo OWASP API Security Top 10; ki\u1ec3m th\u1eed ph\u00e2n quy\u1ec1n, OAuth 2.0\/OIDC, SAML, JWT, SSO v\u00e0 lu\u1ed3ng x\u00e1c th\u1ef1c kh\u00f4ng m\u1eadt kh\u1ea9u (passkey).<\/li>\n<li>Ki\u1ec3m th\u1eed \u1ee9ng d\u1ee5ng t\u00edch h\u1ee3p AI\/LLM v\u00e0 Agentic AI: prompt injection, r\u00f2 r\u1ec9 d\u1eef li\u1ec7u qua RAG, l\u1ea1m d\u1ee5ng quy\u1ec1n c\u1ee7a agent\/tool, ki\u1ec3m so\u00e1t k\u1ebft n\u1ed1i MCP.<\/li>\n<li>Cung c\u1ea5p b\u1eb1ng ch\u1ee9ng khai th\u00e1c (PoC), x\u1ebfp h\u1ea1ng r\u1ee7i ro theo CVSS 4.0 g\u1eafn v\u1edbi t\u00e1c \u0111\u1ed9ng nghi\u1ec7p v\u1ee5; th\u1ef1c hi\u1ec7n retest x\u00e1c nh\u1eadn kh\u1eafc ph\u1ee5c (Remediation Verification).<\/li>\n<li>Ph\u1ed1i h\u1ee3p c\u00e1c b\u1ed9 ph\u1eadn li\u00ean quan x\u00e2y d\u1ef1ng ph\u01b0\u01a1ng \u00e1n v\u00e1 l\u1ed7i v\u00e0 t\u00e1i \u0111\u00e1nh gi\u00e1.<\/li>\n<\/ul>\n<ol start=\"3\">\n<li><strong> H\u1ed7 tr\u1ee3 Blue Team\/SOC n\u00e2ng cao n\u0103ng l\u1ef1c ph\u00f2ng th\u1ee7 (Purple Team)<\/strong><\/li>\n<\/ol>\n<ul>\n<li>Chuy\u1ec3n k\u1ecbch b\u1ea3n t\u1ea5n c\u00f4ng th\u00e0nh detection use case theo MITRE ATT&amp;CK; \u0111o l\u01b0\u1eddng kh\u1ea3 n\u0103ng ph\u00e1t hi\u1ec7n v\u00e0 ph\u1ea3n \u1ee9ng.<\/li>\n<li>T\u01b0 v\u1ea5n ki\u1ebfn tr\u00fac ph\u00f2ng th\u1ee7 \u1ee9ng d\u1ee5ng: WAF\/WAAP, API Gateway, ch\u1ed1ng bot v\u00e0 l\u1ea1m d\u1ee5ng API, nguy\u00ean t\u1eafc Zero Trust.<\/li>\n<li>Theo d\u00f5i v\u00f2ng \u0111\u1eddi kh\u1eafc ph\u1ee5c l\u1ed7 h\u1ed5ng (MTTR), c\u1ea3nh b\u00e1o s\u1edbm c\u00e1c r\u1ee7i ro ph\u01a1i nhi\u1ec5m tr\u00ean b\u1ec1 m\u1eb7t t\u1ea5n c\u00f4ng Internet (EASM).<\/li>\n<\/ul>\n<ol start=\"4\">\n<li><strong> Chu\u1ea9n h\u00f3a quy tr\u00ecnh, ph\u01b0\u01a1ng ph\u00e1p lu\u1eadn v\u00e0 tu\u00e2n th\u1ee7<\/strong><\/li>\n<\/ol>\n<ul>\n<li>Bi\u00ean so\u1ea1n, r\u00e0 so\u00e1t \u0111\u1ecbnh k\u1ef3 quy tr\u00ecnh, quy \u0111\u1ecbnh, checklist v\u00e0 m\u1eabu b\u00e1o c\u00e1o ki\u1ec3m th\u1eed song ng\u1eef Vi\u1ec7t \u2013 Anh.<\/li>\n<li>B\u1ea3o \u0111\u1ea3m ho\u1ea1t \u0111\u1ed9ng ki\u1ec3m th\u1eed tu\u00e2n th\u1ee7 ISO\/IEC 27001:2022, PCI DSS 4.0.1, NIST CSF 2.0, Lu\u1eadt An ninh m\u1ea1ng, Lu\u1eadt B\u1ea3o v\u1ec7 d\u1eef li\u1ec7u c\u00e1 nh\u00e2n s\u1ed1 91\/2025\/QH15 v\u00e0 quy \u0111\u1ecbnh chuy\u00ean ng\u00e0nh.<\/li>\n<li>Qu\u1ea3n tr\u1ecb, sao l\u01b0u, n\u00e2ng c\u1ea5p h\u1ea1 t\u1ea7ng lab ki\u1ec3m th\u1eed; b\u1ea3o v\u1ec7 nghi\u00eam ng\u1eb7t d\u1eef li\u1ec7u nh\u1ea1y c\u1ea3m ph\u00e1t sinh trong qu\u00e1 tr\u00ecnh ki\u1ec3m th\u1eed..<\/li>\n<\/ul>\n<ol start=\"5\">\n<li><strong> Qu\u1ea3n l\u00fd nh\u00f3m, \u0111i\u1ec1u ph\u1ed1i ngu\u1ed3n l\u1ef1c v\u00e0 b\u00e1o c\u00e1o<\/strong><\/li>\n<\/ol>\n<ul>\n<li>Ph\u00e2n c\u00f4ng, gi\u00e1m s\u00e1t ch\u1ea5t l\u01b0\u1ee3ng v\u00e0 so\u00e1t x\u00e9t to\u00e0n b\u1ed9 b\u00e1o c\u00e1o tr\u01b0\u1edbc khi ph\u00e1t h\u00e0nh.<\/li>\n<li>X\u00e2y d\u1ef1ng l\u1ed9 tr\u00ecnh ph\u00e1t tri\u1ec3n n\u0103ng l\u1ef1c, ch\u01b0\u01a1ng tr\u00ecnh \u0111\u00e0o t\u1ea1o v\u00e0 \u0111\u00e1nh gi\u00e1 hi\u1ec7u qu\u1ea3 c\u00f4ng vi\u1ec7c c\u1ee7a nh\u00f3m.<\/li>\n<li>Qu\u1ea3n l\u00fd nh\u00e0 th\u1ea7u ki\u1ec3m th\u1eed \u0111\u1ed9c l\u1eadp, ch\u01b0\u01a1ng tr\u00ecnh Bug Bounty\/VDP v\u00e0 ng\u00e2n s\u00e1ch c\u00f4ng c\u1ee5.<\/li>\n<li>B\u00e1o c\u00e1o dashboard r\u1ee7i ro \u1ee9ng d\u1ee5ng v\u00e0 m\u1ee9c \u0111\u1ed9 ph\u01a1i nhi\u1ec5m cho Ban l\u00e3nh \u0111\u1ea1o theo \u0111\u1ecbnh k\u1ef3.<\/li>\n<\/ul>\n<p class=\"isSelectedEnd\"><span style=\"font-size: 18pt; color: #0000ff;\"><strong>Y\u00eau c\u1ea7u c\u00f4ng vi\u1ec7c:<\/strong><\/span><\/p>\n<p><strong>Y\u00eau c\u1ea7u b\u1eaft bu\u1ed9c:<\/strong><\/p>\n<ul>\n<li>\u0110\u1ea1i h\u1ecdc tr\u1edf l\u00ean chuy\u00ean ng\u00e0nh CNTT\/An to\u00e0n th\u00f4ng tin. Ch\u1ea5p nh\u1eadn \u1ee9ng vi\u00ean kh\u00e1c chuy\u00ean ng\u00e0nh n\u1ebfu ch\u1ee9ng minh \u0111\u01b0\u1ee3c n\u0103ng l\u1ef1c th\u1ef1c chi\u1ebfn t\u01b0\u01a1ng \u0111\u01b0\u01a1ng (ch\u1ee9ng ch\u1ec9, CVE, Bug Bounty, CTF)<\/li>\n<li>Ti\u1ebfng Anh chuy\u00ean ng\u00e0nh: \u0111\u1ecdc t\u00e0i li\u1ec7u k\u1ef9 thu\u1eadt v\u00e0 vi\u1ebft b\u00e1o c\u00e1o.<\/li>\n<li>Cloud &amp; AI: ch\u1ee9ng ch\u1ec9 b\u1ea3o m\u1eadt AWS\/Azure\/GCP, CCSP; kh\u00f3a \u0111\u00e0o t\u1ea1o\/ch\u1ee9ng ch\u1ec9 v\u1ec1 AI Security \u2013 AI Red Teaming (v\u00ed d\u1ee5 SANS SEC535).<\/li>\n<li>(Ch\u1ea5p nh\u1eadn minh ch\u1ee9ng n\u0103ng l\u1ef1c thay th\u1ebf: HTB CPTS\/CBBH\/CWEE, PNPT; x\u1ebfp h\u1ea1ng tr\u00ean HackerOne\/Bugcrowd\/Intigriti; CVE \u0111\u01b0\u1ee3c c\u00f4ng b\u1ed1; th\u00e0nh t\u00edch CTF c\u1ea5p qu\u1ed1c gia\/qu\u1ed1c t\u1ebf.)<\/li>\n<li>Tr\u00ean 6 n\u0103m kinh nghi\u1ec7m trong l\u0129nh v\u1ef1c CNTT\/An to\u00e0n th\u00f4ng tin.<\/li>\n<li>Tr\u00ean 4 n\u0103m kinh nghi\u1ec7m tr\u1ef1c ti\u1ebfp \u1edf v\u1ecb tr\u00ed ki\u1ec3m th\u1eed x\u00e2m nh\u1eadp \u1ee9ng d\u1ee5ng Web\/API (kh\u00f4ng t\u00ednh th\u1eddi gian l\u00e0m v\u1eadn h\u00e0nh h\u1ec7 th\u1ed1ng thu\u1ea7n t\u00fay).<\/li>\n<li>Tr\u00ean 2 n\u0103m qu\u1ea3n l\u00fd nh\u00f3m k\u1ef9 thu\u1eadt t\u1eeb 3 th\u00e0nh vi\u00ean tr\u1edf l\u00ean, ho\u1eb7c vai tr\u00f2 Technical Lead c\u1ee7a d\u1ef1 \u00e1n ki\u1ec3m th\u1eed quy m\u00f4 T\u1eadp \u0111o\u00e0n.<\/li>\n<li>\u0110\u00e3 d\u1eabn d\u1eaft ho\u1eb7c tr\u1ef1c ti\u1ebfp th\u1ef1c hi\u1ec7n t\u1ed1i thi\u1ec3u 20 d\u1ef1 \u00e1n ki\u1ec3m th\u1eed x\u00e2m nh\u1eadp \u1ee9ng d\u1ee5ng Web\/API.<\/li>\n<\/ul>\n<p><strong>\u01afu ti\u00ean:<\/strong><\/p>\n<ul>\n<li>\u01afu ti\u00ean m\u1ea1nh (ki\u1ec3m th\u1eed \u1ee9ng d\u1ee5ng Web\/API): OSCP\/OSCP+, OSWE, OSWA, Burp Suite Certified Practitioner (BSCP), GWAPT (SANS SEC542).<\/li>\n<li>Chuy\u00ean s\u00e2u b\u1ed5 sung: SANS SEC522 (Application Security), SEC540 (Cloud Native Security &amp; DevSecOps), SEC588 (Cloud Penetration Testing), SEC560, OSEP, CRTO, CREST CPSA\/CRT\/CCT<\/li>\n<li>Vai tr\u00f2 qu\u1ea3n l\u00fd: CISSP, CISM, CISA ho\u1eb7c ISO\/IEC 27001 Lead Auditor\/Lead Implementer l\u00e0 l\u1ee3i th\u1ebf.<\/li>\n<li>Kinh nghi\u1ec7m trong m\u00f4i tr\u01b0\u1eddng y\u00eau c\u1ea7u tu\u00e2n th\u1ee7 cao: t\u00e0i ch\u00ednh \u2013 ng\u00e2n h\u00e0ng, h\u00e0ng kh\u00f4ng, b\u1ea5t \u0111\u1ed9ng s\u1ea3n, th\u01b0\u01a1ng m\u1ea1i v\u00e0 d\u1ecbch v\u1ee5; am hi\u1ec3u h\u1ec7 sinh th\u00e1i T\u1eadp \u0111o\u00e0n l\u00e0 l\u1ee3i th\u1ebf.<\/li>\n<li>Kinh nghi\u1ec7m ki\u1ec3m th\u1eed \u1ee9ng d\u1ee5ng cloud-native, API quy m\u00f4 l\u1edbn v\u00e0 \u1ee9ng d\u1ee5ng t\u00edch h\u1ee3p AI\/LLM l\u00e0 l\u1ee3i th\u1ebf n\u1ed5i b\u1eadt.<\/li>\n<li>\u01afu ti\u00ean \u1ee9ng vi\u00ean t\u1eebng l\u00e0m t\u1ea1i c\u00f4ng ty d\u1ecbch v\u1ee5 ki\u1ec3m th\u1eed\/Red Team ho\u1eb7c tham gia ch\u01b0\u01a1ng tr\u00ecnh Bug Bounty.<\/li>\n<li>Hi\u1ec3u bi\u1ebft c\u01a1 c\u1ea5u t\u1ed5 ch\u1ee9c, l\u0129nh v\u1ef1c ho\u1ea1t \u0111\u1ed9ng v\u00e0 v\u0103n h\u00f3a c\u1ee7a T\u1eadp \u0111o\u00e0n l\u00e0 m\u1ed9t l\u1ee3i th\u1ebf.<\/li>\n<\/ul>\n<p><strong>Ki\u1ebfn th\u1ee9c:<\/strong><\/p>\n<ul>\n<li>Chu\u1ea9n OWASP: Top 10 (phi\u00ean b\u1ea3n m\u1edbi nh\u1ea5t), WSTG, ASVS, API Security Top 10, Top 10 for LLM Applications v\u00e0 r\u1ee7i ro Agentic AI.<\/li>\n<li>Ph\u01b0\u01a1ng ph\u00e1p lu\u1eadn ki\u1ec3m th\u1eed: PTES, NIST SP 800-115, MITRE ATT&amp;CK, threat modeling (STRIDE), x\u1ebfp h\u1ea1ng r\u1ee7i ro CVSS 4.0.<\/li>\n<li>Ki\u1ebfn tr\u00fac \u1ee9ng d\u1ee5ng hi\u1ec7n \u0111\u1ea1i: SPA\/JavaScript framework, microservices, API Gateway, GraphQL, WebSocket, backend cho \u1ee9ng d\u1ee5ng di \u0111\u1ed9ng.<\/li>\n<li>An to\u00e0n cloud v\u00e0 container: AWS\/Azure\/GCP, Kubernetes, Docker, Serverless, Infrastructure-as-Code, CNAPP\/CSPM.<\/li>\n<li>\u0110\u1ecbnh danh v\u00e0 truy c\u1eadp: OAuth 2.0\/OIDC, SAML, JWT, MFA\/passkey, ki\u1ebfn tr\u00fac Zero Trust.<\/li>\n<li>DevSecOps v\u00e0 chu\u1ed7i cung \u1ee9ng ph\u1ea7n m\u1ec1m: CI\/CD, SAST\/DAST\/SCA, SBOM, qu\u1ea3n l\u00fd secret, t\u1ea5n c\u00f4ng pipeline.<\/li>\n<li>An to\u00e0n cho AI: r\u1ee7i ro LLM\/RAG\/Agentic AI, prompt injection, AI red teaming, tham chi\u1ebfu NIST AI RMF.<\/li>\n<li>L\u1eadp tr\u00ecnh v\u00e0 t\u1ef1 \u0111\u1ed9ng h\u00f3a: Python, Go, Bash, JavaScript; \u0111\u1ecdc hi\u1ec3u m\u00e3 ngu\u1ed3n (Java, .NET, Node.js, PHP) ph\u1ee5c v\u1ee5 ki\u1ec3m th\u1eed white-box.<\/li>\n<li>Ti\u00eau chu\u1ea9n v\u00e0 ph\u00e1p l\u00fd: ISO\/IEC 27001:2022, PCI DSS 4.0.1, NIST CSF 2.0, Lu\u1eadt An ninh m\u1ea1ng, Lu\u1eadt B\u1ea3o v\u1ec7 d\u1eef li\u1ec7u c\u00e1 nh\u00e2n s\u1ed1 91\/2025\/QH15, quy \u0111\u1ecbnh v\u1ec1 b\u1ea3o \u0111\u1ea3m an to\u00e0n h\u1ec7 th\u1ed1ng theo c\u1ea5p \u0111\u1ed9.<\/li>\n<\/ul>\n<p><strong>K\u1ef9 n\u0103ng:<\/strong><\/p>\n<ul>\n<li>T\u01b0 duy r\u1ee7i ro theo nghi\u1ec7p v\u1ee5: di\u1ec5n gi\u1ea3i l\u1ed7 h\u1ed5ng k\u1ef9 thu\u1eadt th\u00e0nh t\u00e1c \u0111\u1ed9ng kinh doanh.<\/li>\n<li>Vi\u1ebft b\u00e1o c\u00e1o v\u00e0 tr\u00ecnh b\u00e0y song ng\u1eef Vi\u1ec7t \u2013 Anh cho c\u1ea3 c\u1ea5p k\u1ef9 thu\u1eadt v\u00e0 Ban l\u00e3nh \u0111\u1ea1o.<\/li>\n<li>L\u1eadp k\u1ebf ho\u1ea1ch, t\u1ed5 ch\u1ee9c v\u00e0 qu\u1ea3n l\u00fd d\u1ef1 \u00e1n theo m\u00f4 h\u00ecnh Agile.<\/li>\n<li>K\u1ef9 n\u0103ng ph\u00e2n t\u00edch, gi\u1ea3i quy\u1ebft v\u1ea5n \u0111\u1ec1 v\u00e0 ra quy\u1ebft \u0111\u1ecbnh d\u01b0\u1edbi \u00e1p l\u1ef1c th\u1eddi gian.<\/li>\n<li>K\u1ef9 n\u0103ng qu\u1ea3n l\u00fd, ph\u00e2n c\u00f4ng c\u00f4ng vi\u1ec7c v\u00e0 hu\u1ea5n luy\u1ec7n (mentoring) \u0111\u1ed9i ng\u0169 k\u1ebf c\u1eadn.<\/li>\n<li>Giao ti\u1ebfp, ph\u1ed1i h\u1ee3p \u0111a b\u1ed9 ph\u1eadn v\u00e0 l\u00e0m vi\u1ec7c nh\u00f3m hi\u1ec7u qu\u1ea3.<\/li>\n<\/ul>\n<p><strong>C\u00e1c y\u00eau c\u1ea7u kh\u00e1c:<\/strong><\/p>\n<ul>\n<li>\u0110\u1ea1o \u0111\u1ee9c ngh\u1ec1 nghi\u1ec7p v\u00e0 tu\u00e2n th\u1ee7 nghi\u00eam ng\u1eb7t ph\u1ea1m vi ki\u1ec3m th\u1eed (Rules of Engagement), NDA v\u00e0 quy \u0111\u1ecbnh b\u1ea3o v\u1ec7 d\u1eef li\u1ec7u.<\/li>\n<li>Kh\u1ea3 n\u0103ng l\u00e0m vi\u1ec7c \u0111\u1ed9c l\u1eadp, ch\u1ee7 \u0111\u1ed9ng nghi\u00ean c\u1ee9u v\u00e0 h\u1ecdc t\u1eadp li\u00ean t\u1ee5c theo t\u1ed1c \u0111\u1ed9 thay \u0111\u1ed5i c\u1ee7a l\u0129nh v\u1ef1c.<\/li>\n<li>S\u1eb5n s\u00e0ng th\u1ef1c hi\u1ec7n ki\u1ec3m th\u1eed ngo\u00e0i gi\u1edd h\u00e0nh ch\u00ednh theo c\u1eeda s\u1ed5 th\u1eddi gian \u0111\u01b0\u1ee3c ph\u00ea duy\u1ec7t.<\/li>\n<li>Tinh th\u1ea7n \u0111\u1ed3ng \u0111\u1ed9i, cam k\u1ebft cao v\u00e0 trung th\u1ef1c trong b\u00e1o c\u00e1o k\u1ebft qu\u1ea3.<\/li>\n<li>L\u00fd l\u1ecbch t\u01b0 ph\u00e1p minh b\u1ea1ch (y\u00eau c\u1ea7u b\u1eaft bu\u1ed9c v\u1edbi v\u1ecb tr\u00ed ti\u1ebfp c\u1eadn h\u1ec7 th\u1ed1ng tr\u1ecdng y\u1ebfu).<\/li>\n<\/ul>\n<p class=\"isSelectedEnd\"><span style=\"font-size: 18pt; color: #0000ff;\"><strong>Quy\u1ec1n l\u1ee3i:<\/strong><\/span><\/p>\n<ul data-spread=\"false\">\n<li>G\u00f3i thu nh\u1eadp c\u1ea1nh tranh (bao g\u1ed3m l\u01b0\u01a1ng c\u01a1 b\u1ea3n v\u00e0 th\u01b0\u1edfng theo hi\u1ec7u su\u1ea5t).<\/li>\n<li>L\u01b0\u01a1ng th\u1eed vi\u1ec7c b\u1eb1ng 100% l\u01b0\u01a1ng ch\u00ednh th\u1ee9c.<\/li>\n<li>B\u1ea3o hi\u1ec3m s\u1ee9c kh\u1ecfe v\u00e0 b\u1ea3o hi\u1ec3m tai n\u1ea1n to\u00e0n di\u1ec7n.<\/li>\n<li>15 ng\u00e0y ngh\u1ec9 ph\u00e9p n\u0103m v\u00e0 3 ng\u00e0y l\u00e0m vi\u1ec7c t\u1eeb xa m\u1ed7i th\u00e1ng.<\/li>\n<li>\u0110\u01b0\u1ee3c cung c\u1ea5p \u0111\u1ea7y \u0111\u1ee7 trang thi\u1ebft b\u1ecb l\u00e0m vi\u1ec7c (MacBook\/Laptop, chu\u1ed9t, m\u00e0n h\u00ecnh, v.v.).<\/li>\n<li>M\u00f4i tr\u01b0\u1eddng l\u00e0m vi\u1ec7c hi\u1ec7n \u0111\u1ea1i, s\u00e1ng t\u1ea1o v\u00e0 n\u0103ng \u0111\u1ed9ng.<\/li>\n<\/ul>\n<p><span style=\"color: #0000ff;\">N\u01a1i l\u00e0m vi\u1ec7c: <strong>T\u00f2a Galaxy Innovation Hub, \u0110\u01b0\u1eddng D1 &#8211; Khu C\u00f4ng Ngh\u1ec7 Cao, Ph\u01b0\u1eddng T\u0103ng Nh\u01a1n Ph\u00fa, TP.HCM<\/strong><\/span><\/p>\n<p><span style=\"color: #0000ff;\"><span style=\"font-weight: 400;\">CV \u1ee9ng tuy\u1ec3n g\u1eedi qua mail: <\/span><b>talent@galaxyholdings.co\u00a0<\/b><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>T\u1ed5ng quan v\u1ecb tr\u00ed: D\u1eabn d\u1eaft n\u0103ng l\u1ef1c ki\u1ec3m th\u1eed x\u00e2m nh\u1eadp (Offensive Security) cho to\u00e0n b\u1ed9 \u1ee9ng d\u1ee5ng Web, API, Mobile-backend v\u00e0 \u1ee9ng d\u1ee5ng t\u00edch h\u1ee3p AI\/LLM c\u1ee7a C\u00f4ng ty\/C\u00f4ng ty th\u00e0nh vi\u00ean. X\u00e2y d\u1ef1ng v\u00e0 v\u1eadn h\u00e0nh m\u00f4 h\u00ecnh ki\u1ec3m th\u1eed li\u00ean t\u1ee5c (CTEM\/PTaaS): k\u1ebft h\u1ee3p ki\u1ec3m th\u1eed th\u1ee7 c\u00f4ng chuy\u00ean s\u00e2u v\u1edbi [&hellip;]<\/p>\n","protected":false},"template":"","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"default","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"set","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}}},"class_list":["post-15554","job","type-job","status-publish","hentry","company-galaxy-holdings","field-tech","job_type-full-time","location-hcm"],"acf":[],"_links":{"self":[{"href":"https:\/\/galaxyholdings.co\/en\/wp-json\/wp\/v2\/job\/15554","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/galaxyholdings.co\/en\/wp-json\/wp\/v2\/job"}],"about":[{"href":"https:\/\/galaxyholdings.co\/en\/wp-json\/wp\/v2\/types\/job"}],"wp:attachment":[{"href":"https:\/\/galaxyholdings.co\/en\/wp-json\/wp\/v2\/media?parent=15554"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}