Principal Security Engineer

Partner with Product & Engineering teams to identify cyber attack risks in the system and define tactical and strategic mitigation plans

Conduct complete security lifecycle architecture and technical assessments, including but not limited to design requirements assessment, threat modelling, and risk assessment

Build and champion a standardized set of security requirements and design patterns for internal systems and product offerings.

Maintain SLA's by watching for new vulnerabilities, monitoring existing vulnerabilities, working on false-positives and detection logic changes

Actively participate in company's Software Development Lifecycle (SDLC)

Monitor current and proposed laws, regulations, industry standards and ethical requirements related to privacy and information security.

Influence security strategy and roadmap by leveraging the collective strength of the security team and articulating the capabilities needed to effectively manage the cyber-attack risk

Drive Security QBR in partnership with Product & Engineering   

Represent the company within the security community and with customers on topics related to the security of the company's products and services. 

3+ years in a senior security leadership role  

6+ years’ experience working in a security focused role in the technology or other technology heavy industry (e.g. Financial Services) 

Superb communication and interpersonal skills.

Consistent track record designing and integrating security controls in cloud-based architectures

Significant experience conducting threat modelling and risk assessments of cloud services, demonstrating clear ability to identify unique vulnerabilities

Expert level knowledge at all layers of the information security stack with hands-on security engineering experience on AWS, GCP, TFE, Azure, Kubernetes, etc.

Prior experience working with engineering teams on design and implementation of best-practices for security as code

Have the mindset of "First-Time-Right" and "Secure-By-Default"

Working knowledge of the MITRE ATT&CK, NIST CSF, and CIS Critical Control frameworks

Certified Information System Security Professional (CISSP) or Certified in Risk and Information Systems Control (CRISC) certifications preferred

BS or MS in Computer Science, Information Systems, Engineering or a related field

Flexible working time and the ability to work remotely from wherever you are, it is a significant advantage for bank candidates.

Attractive income (base salary & performance bonus) in Viet Nam fintech markets

Full-salary paid for social insurance & Premium healthcare package

20 days of annual leave, 10 days of sick leave and public holidays.

Devices provided (Macbook, mouse, monitor…)

Frequent team bonding and company activities/ events.

Work in newly innovated office and open working space.

Improve English skills, learn more about thinking and working style. Fully adopt Agile way of working, lean team structure.

Working with many talented people with good manners from 13 various cultural backgrounds: US, UK, India, China, Spain, etc,…

Empowered to listen creative ideas, and there is no distance between bosses and employees. 

PEGASI – IT Recruitment Consultancy | Email: recruit@pegasi.com.vn | Tel: +84 28 3622 8666