Engineering Lead/ Software Architect

Lead Penetration Tester

Ho Chi Minh, Ha Noi - Viet Nam

Outsource

• Security

#Hands-on Penetration Testing Perform authorized penetration testing for web applications, mobile applications, APIs, infrastructure, cloud environments, and digital platforms. Identify, validate, exploit where appropriate, and document security vulnerabilities, including authentication, authorization, session management, input validation, encryption, access control, and business logic issues. Conduct security assessments based on industry standards such as OWASP Top 10, OWASP API Security Top 10, OWASP Mobile Security Testing Guide, and relevant security practices. Analyze application flows, user journeys, transaction processes, access controls, and data handling mechanisms to identify potential security risks. Perform vulnerability assessment and manual verification to reduce false positives and confirm actual exploitability in authorized environments. Conduct retesting activities to validate remediation effectiveness and ensure vulnerabilities are properly resolved. Support security testing activities within the SDLC, including security requirement review, threat analysis, test planning, and release security validation. Stay updated with emerging cyber threats, attack techniques, security risks, and security testing best practices.#Technical Leadership & Delivery Support Lead the planning, scoping, and execution of penetration testing activities across assigned projects or workstreams. Define penetration testing approach, test strategy, testing scope, priorities, timelines, and required evidence based on project and client requirements. Guide and mentor penetration testers or security engineers in testing methodology, vulnerability validation, reporting quality, and remediation discussions. Review vulnerability findings, risk ratings, evidence, and remediation recommendations to ensure accuracy, consistency, and practical value. Act as the main technical point of contact for penetration testing activities, working with client stakeholders, security teams, development teams, DevOps, infrastructure teams, and compliance teams. Facilitate vulnerability walkthroughs, risk clarification sessions, remediation discussions, and retesting alignment with relevant stakeholders. Support estimation, planning, status tracking, issue escalation, and delivery reporting for security testing activities. Contribute to improving security testing processes, reporting templates, testing checklists, knowledge sharing, and reusable testing practices. Support regulatory, audit, and compliance requirements by providing security testing evidence, reports, remediation status, and technical clarification when needed.

Negotiation

Principal IT Architect

Ho Chi Minh - Viet Nam

Outsource

#Technical Architecture & Strategy Execution Define target architecture, architecture principles, and technical guardrails for systems, platforms, and integrations Translate strategic goals into concrete technical initiatives and prioritize by business value and risk Evaluate new technologies, platforms, and tools: benefits, risks, costs, strategic fit Design solutions according to modern architecture principles: cloud-native, Zero Trust, automation Own integration and platform strategies: consistent interfaces, API usage, system integration#Solution Ownership & Quality Assurance Structure complex requirements into technical work packages and document solution designs Guide teams through critical implementation phases and drive sound technical decisions Review architectures, designs, and implementations for consistency, quality, and strategic alignment Identify technical risks and develop mitigation measures Ensure complete, clear, and current documentation of systems and solutions Take technical lead on major incidents and structural problems Support local IT administration tasks as needed#Mentoring & Capability Development Mentor senior and mid-level engineers, supporting individual growth and technical depth Share best practices and experiential knowledge in a structured way Identify skill gaps and initiate appropriate development measures Actively introduce and model modern technologies and ways of working#Innovation, Automation & Commercial Stewardship Identify automation opportunities and implement them through scripting, workflows, or platform solutions Evaluate and integrate AI-powered tools to improve efficiency and decision quality Build AI competence within the team Evaluate technical solutions from an economic perspective: TCO, ROI, scaling costs, vendor lock-in Develop structured option comparisons and decision materials for leadership Identify cost savings through tool consolidation, decommissioning unused services, and cloud optimization

Negotiation

(JTL) Cloud Architect

Ho Chi Minh - Viet Nam

Outsource

• Devops
• Azure

Cloud Architecture & Target State: Define and evolve the Azure target architecture, including multisubscription design, network and identity concepts, and Azure Landing Zones - grounded in the Cloud Adoption Framework and Well-Architected Framework DevOps & Automation: Establish IaC standards with Terraform, design GitOps and CI/CD architectures, and enable development teams through self-service platform approaches Security & Governance: Integrate security-by-design and compliance requirements from the start - covering IAM, network segmentation, and secrets management - and support audits and security reviews together with InfoSec and Compliance Migration, Modernization & FinOps: Plan and accompany migrations from on-premise or legacy systems into Azure, evaluate workloads for cloud-readiness, and apply cost-by-design principles to keep cloud spend transparent and efficient Advisory & Enablement: Review and evaluate existing and new cloud concepts, contribute to architecture governance, create and maintain architecture documentation, and actively transfer knowledge to teams and stakeholders

Negotiation