Principal Security Engineer

JOB DESCRIPTION

Partner with Product & Engineering teams to identify cyber attack risks in the system and define tactical and strategic mitigation plans
Conduct complete security lifecycle architecture and technical assessments, including but not limited to design requirements assessment, threat modelling, and risk assessment
Build and champion a standardized set of security requirements and design patterns for internal systems and product offerings.
Maintain SLA's by watching for new vulnerabilities, monitoring existing vulnerabilities, working on false-positives and detection logic changes
Actively participate in company's Software Development Lifecycle (SDLC)
Monitor current and proposed laws, regulations, industry standards and ethical requirements related to privacy and information security.
Influence security strategy and roadmap by leveraging the collective strength of the security team and articulating the capabilities needed to effectively manage the cyber-attack risk
Drive Security QBR in partnership with Product & Engineering   
Represent the company within the security community and with customers on topics related to the security of the company's products and services. 

JOB REQUIREMENT

3+ years in a senior security leadership role  
6+ years’ experience working in a security focused role in the technology or other technology heavy industry (e.g. Financial Services) 
Superb communication and interpersonal skills.
Consistent track record designing and integrating security controls in cloud-based architectures
Significant experience conducting threat modelling and risk assessments of cloud services, demonstrating clear ability to identify unique vulnerabilities
Expert level knowledge at all layers of the information security stack with hands-on security engineering experience on AWS, GCP, TFE, Azure, Kubernetes, etc.
Prior experience working with engineering teams on design and implementation of best-practices for security as code
Have the mindset of "First-Time-Right" and "Secure-By-Default"
Working knowledge of the MITRE ATT&CK, NIST CSF, and CIS Critical Control frameworks
Certified Information System Security Professional (CISSP) or Certified in Risk and Information Systems Control (CRISC) certifications preferred
BS or MS in Computer Science, Information Systems, Engineering or a related field

WHAT'S ON OFFER

Flexible working time and the ability to work remotely from wherever you are, it is a significant advantage for bank candidates.
Attractive income (base salary & performance bonus) in Viet Nam fintech markets
Full-salary paid for social insurance & Premium healthcare package
20 days of annual leave, 10 days of sick leave and public holidays.
Devices provided (Macbook, mouse, monitor…)
Frequent team bonding and company activities/ events.
Work in newly innovated office and open working space.
Improve English skills, learn more about thinking and working style. Fully adopt Agile way of working, lean team structure.
Working with many talented people with good manners from 13 various cultural backgrounds: US, UK, India, China, Spain, etc,…
Empowered to listen creative ideas, and there is no distance between bosses and employees. 

CONTACT

PEGASI – IT Recruitment Consultancy | Email: recruit@pegasi.com.vn | Tel: +84 28 3622 8666
We are PEGASI – IT Recruitment Consultancy in Vietnam. If you are looking for new opportunity for your career path, kindly visit our website www.pegasi.com.vn for your reference. Thank you!

Job Summary

Company Type:

Digital Bank, Product

Technical Skills:

Security

Location:

Ho Chi Minh - Viet Nam

Working Policy:

Job ID:

J01123

Status:

Close

Related Job:

AI Engineer Lead

Ho Chi Minh - Viet Nam

Outsource

Spearhead the development and deployment of various applications, pipelines, and workflows tailored for financial services applications. Take charge of critical technical determinations related to model choices, design of retrieval systems, workflow structuring, integration strategies, cost considerations, and latency issues. Develop methodologies for evaluation and regression testing, utilizing data analysis and failure diagnostics to enhance the effectiveness of solutions. Ensure that deployed solutions adhere to production standards encompassing reliability, security, observability, data security, and audit trails. Transform business, risk, and compliance prerequisites into actionable technical solutions in collaboration with clients and internal partners. Provide guidance to engineers, fostering the adoption of standardized AI engineering practices, frameworks, and development methodologies.

Negotiation

View details

Senior Engineer Manager - Technology Risk

Ho Chi Minh - Viet Nam

Product

  • Management
  • Backend
  • Data Engineering
  • Devops

Develop and implement a cohesive roadmap for strategic execution based on the company's strategic ambitions Coordinate and oversee multiple engineering teams within the organization to achieve desired outcomes Collaborate with various internal teams, including technology, risk, business, and product teams, to ensure requirements are met before and after project delivery Take responsibility for both the development and ongoing operational support of applications in production Manage cyber security updates, ensuring software versions are up to date and infrastructure is patched regularly Monitor and control investment delivery to maintain alignment between different domains and optimize spending Facilitate collaboration between engineering and risk domain experts to achieve strategic technology goals

Negotiation

View details

Data Engineer

Ho Chi Minh - Viet Nam

Outsource

  • Data Engineering

Develop, test, and manage batch and streaming data pipelines on various cloud platforms like Snowflake, AWS Redshift, and Google Cloud Platform (BigQuery, Dataflow, Pub/Sub, Cloud Composer). Import data from various sources such as client APIs, SaaS platforms, event streams, and databases into secure cloud storage and warehouse layers. Create transformation logic using SQL and Python and deploy tested, well-documented models in dbt. Establish datasets and dashboards in Sigma for easy querying by business users and AI systems. Prepare and deliver data for AI applications, including feature tables, embeddings, and retrieval datasets, and provide access to data through controlled APIs and MCP servers. Utilize AI programming tools and automated workflows to enhance development efficiency, testing, and documentation, ensuring accuracy in the output. Set up data quality assessments, monitoring, and alerts, and develop automated procedures for diagnosing pipeline failures with AI support. Record details about pipelines, schemas, and data structures for the benefit of other teams and AI systems. Engage in code assessments and sprint planning within an agile, globally distributed team.

Negotiation

View details