Principal Security Engineer

JOB DESCRIPTION

Partner with Product & Engineering teams to identify cyber attack risks in the system and define tactical and strategic mitigation plans
Conduct complete security lifecycle architecture and technical assessments, including but not limited to design requirements assessment, threat modelling, and risk assessment
Build and champion a standardized set of security requirements and design patterns for internal systems and product offerings.
Maintain SLA's by watching for new vulnerabilities, monitoring existing vulnerabilities, working on false-positives and detection logic changes
Actively participate in company's Software Development Lifecycle (SDLC)
Monitor current and proposed laws, regulations, industry standards and ethical requirements related to privacy and information security.
Influence security strategy and roadmap by leveraging the collective strength of the security team and articulating the capabilities needed to effectively manage the cyber-attack risk
Drive Security QBR in partnership with Product & Engineering   
Represent the company within the security community and with customers on topics related to the security of the company's products and services. 

JOB REQUIREMENT

3+ years in a senior security leadership role  
6+ years’ experience working in a security focused role in the technology or other technology heavy industry (e.g. Financial Services) 
Superb communication and interpersonal skills.
Consistent track record designing and integrating security controls in cloud-based architectures
Significant experience conducting threat modelling and risk assessments of cloud services, demonstrating clear ability to identify unique vulnerabilities
Expert level knowledge at all layers of the information security stack with hands-on security engineering experience on AWS, GCP, TFE, Azure, Kubernetes, etc.
Prior experience working with engineering teams on design and implementation of best-practices for security as code
Have the mindset of "First-Time-Right" and "Secure-By-Default"
Working knowledge of the MITRE ATT&CK, NIST CSF, and CIS Critical Control frameworks
Certified Information System Security Professional (CISSP) or Certified in Risk and Information Systems Control (CRISC) certifications preferred
BS or MS in Computer Science, Information Systems, Engineering or a related field

WHAT'S ON OFFER

Flexible working time and the ability to work remotely from wherever you are, it is a significant advantage for bank candidates.
Attractive income (base salary & performance bonus) in Viet Nam fintech markets
Full-salary paid for social insurance & Premium healthcare package
20 days of annual leave, 10 days of sick leave and public holidays.
Devices provided (Macbook, mouse, monitor…)
Frequent team bonding and company activities/ events.
Work in newly innovated office and open working space.
Improve English skills, learn more about thinking and working style. Fully adopt Agile way of working, lean team structure.
Working with many talented people with good manners from 13 various cultural backgrounds: US, UK, India, China, Spain, etc,…
Empowered to listen creative ideas, and there is no distance between bosses and employees. 

CONTACT

PEGASI – IT Recruitment Consultancy | Email: recruit@pegasi.com.vn | Tel: +84 28 3622 8666
We are PEGASI – IT Recruitment Consultancy in Vietnam. If you are looking for new opportunity for your career path, kindly visit our website www.pegasi.com.vn for your reference. Thank you!

Job Summary

Company Type:

Digital Bank, Product

Technical Skills:

Security

Location:

Ho Chi Minh - Viet Nam

Working Policy:

Salary:

Negotiation

Job ID:

J01123

Status:

Close

Related Job:

Senior Software Engineer (Backend + Network)

Ho Chi Minh - Viet Nam


Product

  • Backend
  • Network

Continuously monitor and analyze new VPN providers, proxy services, and anonymization tools. Conduct investigations on IP allocation patterns, hosting provider behaviors, and network infrastructure changes. Develop and maintain comprehensive databases of known VPN/proxy IP ranges and behavioral signatures. Research emerging threats such as residential proxies, mobile proxies, and distributed proxy networks. Monitor darkweb marketplaces and security forums for emerging proxy/VPN trends. Perform deep packet analysis and network traffic pattern recognition. Develop and maintain the system using PHP, Python, and/or Go. Optimize VPN/Proxy detection algorithms. Design scalable infrastructure to handle millions of IP lookups per day. Implement monitoring and alerting systems for detection accuracy and system performance. Analyze production incidents related to false positives/negatives in threat detection. Collaborate with DevOps team on deployment of detection rule updates and model improvements. Investigate customer-reported bypass attempts and develop rapid response solutions. Provide technical expertise during customer security consultations. Support sales engineering team with technical demonstrations and proof-of-concepts. Document threat analysis findings and detection methodologies for internal and customer use. Maintain relationships with cybersecurity vendors, threat intelligence providers, and ISPs. Monitor industry threat reports, security advisories, and academic research. Participate in cybersecurity conferences and forums to stay current with the threat landscape. Contribute to open-source security tools and research when appropriate.

Negotiation

View details

Data Engineer - RefData

Ho Chi Minh, Ha Noi - Viet Nam


product, Investment Management

  • Data Engineering

Developing an automated data processing system and overseeing its maintenance Consolidating and integrating various data sources and databases into a unified system Designing interfaces and micro services using Python Enhancing the organization's data through NLP and AI models Preparing and cleaning semi-structured or unstructured data Creating effective algorithms for data processing Testing and incorporating external APIs Assisting the Business Analysts team

Negotiation

View details

Senior DevOps Engineer

Ha Noi - Viet Nam


Financial services, Crypto

  • Devops
  • AWS

Develop, maintain, and manage tools to automate operational activities and improve engineering efficiency. This includes writing custom modules in Node.js or Golang for task management and system orchestration. Troubleshoot, diagnose, and resolve complex software and infrastructure issues, including debugging and modifying application code in Node.js and Golang environments. Update, track, and resolve technical issues in a timely manner. Recommend architectural enhancements and propose process improvements for scalability and reliability. Contribute to application development by intervening in existing modules or creating new ones to enhance system manageability, scalability, and performance. Evaluate and implement new technologies, frameworks, and vendor products to support business goals. Apply best-in-class security practices to safeguard critical systems and data. Ensure stability, reliability, and performance of production and non-production environments. Collaborate with engineering, QA, and product teams to align infrastructure with development needs. Participate in a 24/7 on-call rotation to support high-availability systems.

Negotiation

View details