Lead Security Engineer

ABOUT CLIENT

Our client is a global technology company that specializes in providing innovative IT solutions for the financial services industry

JOB DESCRIPTION

Create IT security architecture, minimum controls, and countermeasures for both new and existing IT systems.
Offer guidance on integrating security principles into technical solutions and establishing reusable security architecture patterns.
Carry out risk assessments and evaluations to facilitate informed decision-making on IT security posture for stakeholders.
Establish cybersecurity standards for Azure cloud services.
Provide technical advice to IT teams to ensure adherence to best security practices.
Assist IT teams in implementing security requirements and embracing security best practices.
Contribute to proof-of-concepts on cybersecurity solutions for improved cyber resilience.
Research emerging security threats, including those concerning Azure cloud, and recommend solutions or workarounds to mitigate risks.

JOB REQUIREMENT

At least 8 years of experience in software development
5+ years of hands-on experience in Python development (mandatory, strong coding capability is critical)
2 years of experience in application Security/DevSecOps
Experience working in the banking/financial services domain
Strong experience with cloud services and cloud security practices
Solid understanding of secure coding practices and code review methodologies
Experience integrating security tools into CI/CD pipelines
Familiarity with SAST/SCA/DAST tools
Basic understanding of penetration testing concepts and tools (e.g., Burp Suite, MobSF, Frida)
Knowledge of API security, authentication mechanisms, and cryptographic fundamentals
Experience working in Agile/DevOps environments
Experience with security automation frameworks and tooling in Python
Exposure to AI/ML application security (e.g., prompt injection, model abuse)
Certifications such as Security Specialty, CSSLP, OSCP (optional)
Experience with container security and IaC scanning
Familiarity with banking security standards and compliance requirements

WHAT'S ON OFFER

Attractive salary package
Guaranteed 13th-month salary
Performance-based bonus
Access to professional English course
Comprehensive health insurance
Generous annual leave allowance

CONTACT

PEGASI – IT Recruitment Consultancy | Email: recruit@pegasi.com.vn | Tel: +84 28 3622 8666
We are PEGASI – IT Recruitment Consultancy in Vietnam. If you are looking for new opportunity for your career path, kindly visit our website www.pegasi.com.vn for your reference. Thank you!

Job Summary

Company Type:

Outsource

Technical Skills:

Security, Python, AWS, Terraform

Location:

Ho Chi Minh, Ha Noi - Viet Nam

Working Policy:

Hybrid

Job ID:

J01732

Status:

Active

Related Job:

Junior Embedded Linux Middleware Engineer

Ho Chi Minh - Viet Nam


Outsource

  • Embedded
  • C/C++

Design, develop, and test middleware/framework for SoC platforms. Perform Integration Testing, Unit Testing, Functional Testing. Prepare technical documentation and develop sample applications for the product. Collaborate with different teams to ensure successful project delivery. Identify, report, and resolve technical issues.

Negotiation

View details

Lead Penetration Tester

Ho Chi Minh, Ha Noi - Viet Nam


Outsource

#Hands-on Penetration Testing Perform authorized penetration testing for web applications, mobile applications, APIs, infrastructure, cloud environments, and digital platforms. Identify, validate, exploit where appropriate, and document security vulnerabilities, including authentication, authorization, session management, input validation, encryption, access control, and business logic issues. Conduct security assessments based on industry standards such as OWASP Top 10, OWASP API Security Top 10, OWASP Mobile Security Testing Guide, and relevant security practices. Analyze application flows, user journeys, transaction processes, access controls, and data handling mechanisms to identify potential security risks. Perform vulnerability assessment and manual verification to reduce false positives and confirm actual exploitability in authorized environments. Conduct retesting activities to validate remediation effectiveness and ensure vulnerabilities are properly resolved. Support security testing activities within the SDLC, including security requirement review, threat analysis, test planning, and release security validation. Stay updated with emerging cyber threats, attack techniques, security risks, and security testing best practices.#Technical Leadership & Delivery Support Lead the planning, scoping, and execution of penetration testing activities across assigned projects or workstreams. Define penetration testing approach, test strategy, testing scope, priorities, timelines, and required evidence based on project and client requirements. Guide and mentor penetration testers or security engineers in testing methodology, vulnerability validation, reporting quality, and remediation discussions. Review vulnerability findings, risk ratings, evidence, and remediation recommendations to ensure accuracy, consistency, and practical value. Act as the main technical point of contact for penetration testing activities, working with client stakeholders, security teams, development teams, DevOps, infrastructure teams, and compliance teams. Facilitate vulnerability walkthroughs, risk clarification sessions, remediation discussions, and retesting alignment with relevant stakeholders. Support estimation, planning, status tracking, issue escalation, and delivery reporting for security testing activities. Contribute to improving security testing processes, reporting templates, testing checklists, knowledge sharing, and reusable testing practices. Support regulatory, audit, and compliance requirements by providing security testing evidence, reports, remediation status, and technical clarification when needed.

Negotiation

View details

Senior Embedded Linux Middleware Engineer

Ho Chi Minh - Viet Nam


Outsource

Design, develop, and test middleware/framework for SoC platforms. Perform Integration Testing, Unit Testing, Functional Testing. Prepare technical documentation and develop sample applications for the product. Collaborate with different teams to ensure successful project delivery. Identify, report, and resolve technical issues

Negotiation

View details