Security Consultant (Expert)

ABOUT CLIENT

Our client is a leading global technology company that provides a wide range of IT services and solutions. With a strong focus on innovation and digital transformation, our client helps businesses adapt to the ever-changing technological landscape. Their expertise in areas like cloud computing, cybersecurity, and AI makes them a valuable partner for organizations.

JOB DESCRIPTION

Offer expertise in architectural consulting across various domains and projects
Develop architectural specifications with a focus on ensuring security best practices and managing cyber risks
Present architectural decisions for necessary approvals
Evaluate operational security requirements for specific projects
Conduct security assessments upon request
Assess technology risk, security standards, and compliance
Identify and evaluate information security exposures and recommend additional controls
Provide advice on compliance with cybersecurity regulations such as APRA-CPS234, GDPR, IRAP, PCI-DSS
Offer guidance on application security vulnerabilities and conduct automated security checks
Manage relationships with stakeholders across the organization, serving as a liaison between security and the business.

JOB REQUIREMENT

Required Qualifications:
Bachelor's or Master's degree in Computer Science, Information Security or a related field
7-10 years of experience in cyber security (preferably in the financial sector)
 
Essential Skills:
Professional certifications such as CISSP, CISM, CEH or the equivalent
Comprehensive understanding of security frameworks and standards (e.g., NIST, COBIT)
Proven expertise with security technologies such as firewalls, intrusion detection/prevention systems, SIEM and encryption
Proficient in developing architectural specifications ensuring sound security practices and cyber risk management
Competency in security risk analysis, assessment and mitigation
Experience with Cloud security (preferably Google Cloud Platform (GCP) but either AWS Cloud or Azure Cloud is acceptable), DevSecOps, and application security
Knowledge of emerging security threats and mitigation strategies
Familiarity with software development lifecycle, CI/CD tools, and conducting code reviews
Contributions to Vulnerability Management findings, triage, and action recommendations
Research and analysis skills to identify new security automation opportunities
Effective communication with security and non-security stakeholders for issue resolution
Fluent in English verbal communication
Adaptability to changes in customer requirements and strong customer engagement skills
Strong analytical, problem-solving, and decision-making skills
 
Desired Skills:
Background in financial services security and compliance
Understanding of Google Cloud Platform (GCP) and Kubernetes
Experience in designing controls for SaaS and PaaS based services
Proficiency in designing and architecting new software systems and integrations
Strong development experience in languages such as Go, Java or similar

WHAT'S ON OFFER

This position offers hybrid working arrangements, with three days working in the office and flexible hours.
Salary is negotiable based on candidate expectations.
Employees are entitled to 18 paid leaves annually, which includes 12 annual leaves and 6 personal leaves.
The insurance plan includes coverage based on full salary, a 13th-month salary, and performance bonuses.
A monthly meal allowance of 730,000 VND is provided.
Employees receive 100% full salary and benefits from the start of employment.
Medical benefits are extended to the employee and their family.
The work environment is fast-paced, flexible, and multicultural with opportunities for travel to 49 countries.
The company provides complimentary snacks, refreshments, and parking facilities.
Internal training programs covering technical, functional, and English language skills are offered.
The regular working hours are from 08:30 AM to 06:00 PM on Mondays to Fridays, inclusive of meal breaks.

CONTACT

PEGASI – IT Recruitment Consultancy | Email: recruit@pegasi.com.vn | Tel: +84 28 3622 8666
We are PEGASI – IT Recruitment Consultancy in Vietnam. If you are looking for new opportunity for your career path, kindly visit our website www.pegasi.com.vn for your reference. Thank you!

Job Summary

Company Type:

Outsource

Technical Skills:

Security, Cloud

Location:

Ho Chi Minh - Viet Nam

Working Policy:

Hybrid

Job ID:

J01492

Status:

Close

Related Job:

Lead Penetration Tester

Ho Chi Minh, Ha Noi - Viet Nam

Outsource

  • Security

Conduct authorized penetration testing for various digital platforms, including web applications, mobile applications, APIs, infrastructure, and cloud environments. Identify and document security vulnerabilities, validate and exploit when necessary, covering areas such as authentication, authorization, session management, input validation, encryption, access control, and business logic issues. Perform security assessments according to industry standards (e.g. OWASP Top 10, OWASP API Security Top 10, OWASP Mobile Security Testing Guide) and relevant security practices. Analyze application flows, user journeys, transaction processes, access controls, and data handling mechanisms to uncover potential security risks. Conduct vulnerability assessment and manual verification to reduce false positives, confirming actual exploitability in authorized environments. Retest to validate remediation effectiveness and ensure vulnerabilities are properly resolved. Support security testing activities within the software development life cycle (SDLC), including security requirement review, threat analysis, test planning, and release security validation. Stay updated with emerging cyber threats, attack techniques, security risks, and security testing best practices. Lead the planning, scoping, and execution of penetration testing activities across assigned projects. Define the penetration testing approach, test strategy, testing scope, priorities, timelines, and required evidence based on project and client requirements. Guide and mentor penetration testers or security engineers in testing methodology, vulnerability validation, reporting quality, and remediation discussions. Review vulnerability findings, risk ratings, evidence, and remediation recommendations to ensure accuracy, consistency, and practical value. Serve as the main technical point of contact for penetration testing activities, working with client stakeholders, security teams, development teams, DevOps, infrastructure teams, and compliance teams. Facilitate vulnerability walkthroughs, risk clarification sessions, remediation discussions, and retesting alignment with relevant stakeholders. Support estimation, planning, status tracking, issue escalation, and delivery reporting for security testing activities. Contribute to improving security testing processes, reporting templates, testing checklists, knowledge sharing, and reusable testing practices. Support regulatory, audit, and compliance requirements by providing security testing evidence, reports, remediation status, and technical clarification when needed.

Negotiation

View details

(JTL) Cloud Architect

Ho Chi Minh - Viet Nam

Outsource

  • Devops
  • Azure

Defining and evolving the target architecture for Azure, including design, network, identity concepts, and Azure Landing Zones Implementing Adoption Framework and Well-Architected Framework Establishing IaC standards with Terraform, designing GitOps and CI/CD architectures, and enabling development teams through self-service platform approaches Integrating security-by-design and compliance requirements from the start, covering IAM, network segmentation, and secrets management, and supporting audits and security reviews together with InfoSec and Compliance Planning and accompanying migrations from on-premise or legacy systems into Azure, evaluating workloads for cloud-readiness, and applying cost-by-design principles to keep cloud spend transparent and efficient Reviewing and evaluating existing and new cloud concepts, contributing to architecture governance, creating and maintaining architecture documentation, and actively transferring knowledge to teams and stakeholders

Negotiation

View details

Cloud Engineer (Azure)

Ho Chi Minh - Viet Nam

Product, Outsource

  • Devops
  • Azure

Design, set up, and operate the Core Cloud Infrastructure. Integrate cloud services into the Developer Platform, including financial operations (FinOps). Implement and manage infrastructure as code (IaC) using Terraform, OpenTofu, and Crossplane. Utilize cloud services effectively. Develop and maintain scripts and applications using Python and Go. Manage CI/CD pipelines using ArgoCD and cloud-specific pipelines. Implement FinOps tools. Ensure the security and networking of the cloud infrastructure.

Negotiation

View details