Senior DevSecOps Engineer

JOB DESCRIPTION

Manage and execute security assessments for agile projects & ensure project timelines are met.
Identify opportunities to automate and standardize information security controls and for the supported groups
Analyze source code to mitigate identified weaknesses and vulnerabilities within the system
Scan and analyze applications with automated tools, and perform manual testing if necessary
Collaborate with application teams to ensure that any identified security vulnerabilities are remediated in a timely manner.
Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behaviour, conduct and business
practices, and escalating, managing and reporting control issues with transparency.
Utilize Static & Dynamic Application Security Testing (SAST/DAST), Interactive Application Security Testing (IAST), and Component Vulnerability Management (CVM) tools such as Fortify, Snyk, BurpSuite, ZAP etc to uncover additional vulnerabilities 

JOB REQUIREMENT

Qualifications:
At least 5-7 years of relevant experience in DevSecOps (worked with tools in the area of Static Analysis, Dynamic Analysis, Container Analysis, Third Party Library analysis/Software Composition Analysis…)
Has experience in Pentesting in the area of infra/web/mobile/API
Consistently demonstrates clear and concise written and verbal communication.
Must have a strong understanding of Linux, Kubernetes, working knowledge of CI/CD process, Jira & Programming language Python for automation
Has exposure in Vulnerability Management
Education:
Bachelor’s degree/University degree or equivalent experience
Master’s degree preferred

WHAT'S ON OFFER

Why join with us
We build a professional & fun working environment.
We focus on your growth, yes the long-term growth.
We develop the future-ready digital bank platform.
Benefits
Competitive salary and bonus.
Opportunities for your professional growth in fintech, especially in digital banking 
Social insurance (max), premium medical insurance
Parking allowance, snacks, and coffee.
Monthly team-building and social activities.

CONTACT

PEGASI – IT Recruitment Consultancy | Email: recruit@pegasi.com.vn | Tel: +84 28 3622 8666
We are PEGASI – IT Recruitment Consultancy in Vietnam. If you are looking for new opportunity for your career path, kindly visit our website www.pegasi.com.vn for your reference. Thank you!

Job Summary

Company Type:

Outsource

Technical Skills:

Security, Devops

Location:

Ho Chi Minh - Viet Nam

Working Policy:

Job ID:

J01215

Status:

Close

Related Job:

Senior Frontend Engineer (Platform)

Ho Chi Minh - Viet Nam

Outsource

  • ReactJS
  • Typescript

Develop and uphold frontend templates, boilerplates, and libraries to assist product teams in enhancing efficiency. Play a role in enhancing the design system and component library. Aid frontend teams in incorporating and leveraging guidelines, templates, and tools. Ensure an efficient and scalable frontend development setup with contemporary toolchains. Assess the compatibility of new frontend technologies with our existing landscape. Assist in initiating new frontend projects with adherence to predefined standards, best practices, and toolchains. Contribute to establishing and refining frontend standards and best practices within the organization.

Negotiation

View details

QA Engineer - Manual

Ho Chi Minh - Viet Nam

Product

  • Manual Test

Responsible for complete manual QA of web, mobile, and payment processes including functionality, integration, regression, exploratory testing, and User Acceptance Testing (UAT). Develop risk-based testing strategies for releases, including scoping, estimating, preparing test data, defining entry and exit criteria. Ensure seamless end-to-end flows across frontend, backend, and integrations with third-party systems, covering multiple countries, currencies, and payment methods. Conduct API testing using tools like Postman, verifying payment lifecycle and handling of failures such as refunds, settlements, retries, idempotency, and webhooks. Manage defect reporting and triage, communicate quality status and risks effectively, and make evidence-based decisions on whether to proceed with releases. Enhance regression testing coverage and QA processes, fostering close collaboration with Product and Engineering teams.

Negotiation

View details

Embedded Software Engineer (Application Software (ASW), Chinese Speaking)

Ho Chi Minh, Ha Noi - Viet Nam

Outsource

  • Embedded
  • C/C++

Analyze customer function requirements Translate them into detailed specifications for CRPs Design solutions aligned with customer needs and implemented ASW software using ASCET Conduct verification activities, including unit and component testing, for each release cycle Integrat calibration parameters to optimize function performance and efficiency Evaluate vehicle test results to ensure compliance with performance standards Investigate and resolve issues reported by stakeholders such as APP, TPM, and customers

Negotiation

View details