Principal Security Engineer

JOB DESCRIPTION

Partner with Product & Engineering teams to identify cyber attack risks in the system and define tactical and strategic mitigation plans
Conduct complete security lifecycle architecture and technical assessments, including but not limited to design requirements assessment, threat modelling, and risk assessment
Build and champion a standardized set of security requirements and design patterns for internal systems and product offerings.
Maintain SLA's by watching for new vulnerabilities, monitoring existing vulnerabilities, working on false-positives and detection logic changes
Actively participate in company's Software Development Lifecycle (SDLC)
Monitor current and proposed laws, regulations, industry standards and ethical requirements related to privacy and information security.
Influence security strategy and roadmap by leveraging the collective strength of the security team and articulating the capabilities needed to effectively manage the cyber-attack risk
Drive Security QBR in partnership with Product & Engineering   
Represent the company within the security community and with customers on topics related to the security of the company's products and services. 

JOB REQUIREMENT

3+ years in a senior security leadership role  
6+ years’ experience working in a security focused role in the technology or other technology heavy industry (e.g. Financial Services) 
Superb communication and interpersonal skills.
Consistent track record designing and integrating security controls in cloud-based architectures
Significant experience conducting threat modelling and risk assessments of cloud services, demonstrating clear ability to identify unique vulnerabilities
Expert level knowledge at all layers of the information security stack with hands-on security engineering experience on AWS, GCP, TFE, Azure, Kubernetes, etc.
Prior experience working with engineering teams on design and implementation of best-practices for security as code
Have the mindset of "First-Time-Right" and "Secure-By-Default"
Working knowledge of the MITRE ATT&CK, NIST CSF, and CIS Critical Control frameworks
Certified Information System Security Professional (CISSP) or Certified in Risk and Information Systems Control (CRISC) certifications preferred
BS or MS in Computer Science, Information Systems, Engineering or a related field

WHAT'S ON OFFER

Flexible working time and the ability to work remotely from wherever you are, it is a significant advantage for bank candidates.
Attractive income (base salary & performance bonus) in Viet Nam fintech markets
Full-salary paid for social insurance & Premium healthcare package
20 days of annual leave, 10 days of sick leave and public holidays.
Devices provided (Macbook, mouse, monitor…)
Frequent team bonding and company activities/ events.
Work in newly innovated office and open working space.
Improve English skills, learn more about thinking and working style. Fully adopt Agile way of working, lean team structure.
Working with many talented people with good manners from 13 various cultural backgrounds: US, UK, India, China, Spain, etc,…
Empowered to listen creative ideas, and there is no distance between bosses and employees. 

CONTACT

PEGASI – IT Recruitment Consultancy | Email: recruit@pegasi.com.vn | Tel: +84 28 3622 8666
We are PEGASI – IT Recruitment Consultancy in Vietnam. If you are looking for new opportunity for your career path, kindly visit our website www.pegasi.com.vn for your reference. Thank you!

Job Summary

Company Type:

Digital Bank, Product

Technical Skills:

Security

Location:

Ho Chi Minh - Viet Nam

Working Policy:

Salary:

Negotiation

Job ID:

J01123

Status:

Close

Related Job:

Senior Software Engineer (PHP/ Golang)

Ho Chi Minh - Viet Nam

Product

  • PHP
  • Golang

#Build great software: Analyze requirements, translate them into technical specifications, and estimate their implementation cost. Be a strong individual contributor, actively writing (or teaching AI how to write) high-quality, maintainable, and scalable code. Contribute to the technical roadmap: Identify and prioritise problems, gaps and technical debt in the product. Research and evaluate new tools, technologies and frameworks to enhance the product and improve development efficiency. Actively ensure the product is technically prepared for future challenges, especially considering security, maintainability, and scalability.#Co-own the product: We emphasize the culture of ownership, so our engineers are empowered and encouraged to provide product development suggestions. Provide technical input and insights to Product Managers regarding tradeoffs between scope, engineering capacity, and time constraints.#Raise the quality bar for the team: Champion best practices and actively participate in code and design document reviews to ensure high quality. Mentor and support other engineers, fostering their growth and development. Cross-team collaboration Maintain communication with other technical teams to avoid duplicate effort, incompatible solutions and solving problems other teams have already resolved.

Negotiation

View details

Senior Deep Learning Algorithms Engineer

Ho Chi Minh, Ha Noi - Viet Nam

Product

  • Machine Learning
  • Algorithm

Analyze and optimize deep learning training and inference workloads on advanced hardware and software platforms. Work with researchers and engineers to enhance workload performance. Develop high-quality software for deep learning platforms. Create automated tools for workload analysis and optimization.

Negotiation

View details

Software Engineer

Ho Chi Minh - Viet Nam

Product

Create and develop the API Platform with a focus on reliability, performance, and providing a top-tier developer experience Deploy and enhance AI/ML models in scalable, production environments in collaboration with research and applied ML teams Manage and advance a contemporary, cloud-native infrastructure stack utilizing Kubernetes, Docker, and infrastructure-as-code (IaC) tools Ensure platform dependability by designing and implementing telemetry, monitoring, alerting, autoscaling, failover, and disaster recovery mechanisms Contribute to developer and operations workflows, encompassing CI/CD pipelines, release management, and on-call rotations Work collaboratively across teams to implement secure APIs with fine-grained access control, usage metering, and billing integration Continuously enhance platform performance, cost-efficiency, and observability to accommodate scaling and serve users globally.

Negotiation

View details