DevSecOps Engineer
ABOUT CLIENT
JOB DESCRIPTION
JOB REQUIREMENT
WHAT'S ON OFFER
CONTACT
Job Summary
Company Type:
Product, mobile cyber-security
Technical Skills:
Devops, Security
Location:
Ho Chi Minh - Viet Nam
Working Policy:
Hybrid
Job ID:
J01491
Status:
Close
Related Job:
Lead Penetration Tester
Ho Chi Minh, Ha Noi - Viet Nam
Outsource
- Security
Conduct authorized penetration testing for various digital platforms, including web applications, mobile applications, APIs, infrastructure, and cloud environments. Identify and document security vulnerabilities, validate and exploit when necessary, covering areas such as authentication, authorization, session management, input validation, encryption, access control, and business logic issues. Perform security assessments according to industry standards (e.g. OWASP Top 10, OWASP API Security Top 10, OWASP Mobile Security Testing Guide) and relevant security practices. Analyze application flows, user journeys, transaction processes, access controls, and data handling mechanisms to uncover potential security risks. Conduct vulnerability assessment and manual verification to reduce false positives, confirming actual exploitability in authorized environments. Retest to validate remediation effectiveness and ensure vulnerabilities are properly resolved. Support security testing activities within the software development life cycle (SDLC), including security requirement review, threat analysis, test planning, and release security validation. Stay updated with emerging cyber threats, attack techniques, security risks, and security testing best practices. Lead the planning, scoping, and execution of penetration testing activities across assigned projects. Define the penetration testing approach, test strategy, testing scope, priorities, timelines, and required evidence based on project and client requirements. Guide and mentor penetration testers or security engineers in testing methodology, vulnerability validation, reporting quality, and remediation discussions. Review vulnerability findings, risk ratings, evidence, and remediation recommendations to ensure accuracy, consistency, and practical value. Serve as the main technical point of contact for penetration testing activities, working with client stakeholders, security teams, development teams, DevOps, infrastructure teams, and compliance teams. Facilitate vulnerability walkthroughs, risk clarification sessions, remediation discussions, and retesting alignment with relevant stakeholders. Support estimation, planning, status tracking, issue escalation, and delivery reporting for security testing activities. Contribute to improving security testing processes, reporting templates, testing checklists, knowledge sharing, and reusable testing practices. Support regulatory, audit, and compliance requirements by providing security testing evidence, reports, remediation status, and technical clarification when needed.
Negotiation
View details(JTL) Cloud Architect
Ho Chi Minh - Viet Nam
Outsource
- Devops
- Azure
Defining and evolving the target architecture for Azure, including design, network, identity concepts, and Azure Landing Zones Implementing Adoption Framework and Well-Architected Framework Establishing IaC standards with Terraform, designing GitOps and CI/CD architectures, and enabling development teams through self-service platform approaches Integrating security-by-design and compliance requirements from the start, covering IAM, network segmentation, and secrets management, and supporting audits and security reviews together with InfoSec and Compliance Planning and accompanying migrations from on-premise or legacy systems into Azure, evaluating workloads for cloud-readiness, and applying cost-by-design principles to keep cloud spend transparent and efficient Reviewing and evaluating existing and new cloud concepts, contributing to architecture governance, creating and maintaining architecture documentation, and actively transferring knowledge to teams and stakeholders
Negotiation
View detailsCloud Engineer (Azure)
Ho Chi Minh - Viet Nam
Product, Outsource
- Devops
- Azure
Design, set up, and operate the Core Cloud Infrastructure. Integrate cloud services into the Developer Platform, including financial operations (FinOps). Implement and manage infrastructure as code (IaC) using Terraform, OpenTofu, and Crossplane. Utilize cloud services effectively. Develop and maintain scripts and applications using Python and Go. Manage CI/CD pipelines using ArgoCD and cloud-specific pipelines. Implement FinOps tools. Ensure the security and networking of the cloud infrastructure.