Senior SecOps Engineer

JOB DESCRIPTION

Define, plan and execute Product security initiatives
Identify, document and communicate risks related to Cloud infrastructure and application design
Work with development and operation teams on solution design security and conduct regular reviews
Conduct regular penetration testing in collaboration with external vendors and see findings through resolution
Work on internal security practices in compliance with ISO 27001 and SOC2 TypeII
Support sales teams to address security-related questions from customers (RFI, RFP)
Collaborate with teams in multiple locations (Hong Kong, Vietnam)

JOB REQUIREMENT

More than 5 years working experience in SecOps positions or equivalent
Experience with SIEM solutions to monitor and identify threats
Familiar with Security standards: CIS, NIST, OSWAP, Mitre att&ck
Deep understanding of networking protocols
Comfortable in a command line environment, scripting experience is a must
Experience with Kubernetes hardening is a plus
“Get things done” attitude, proven ability to work independently on complex tasks
Strong analytic skills, problem-solver, constantly curious and eager to learn
Very attentive to details, particularly security
Excellent communication and presentation skills in English

WHAT'S ON OFFER

13th Salary, paid pro-rata, every month to allow more flexible financial plans
Full salary on probation
Fully social insurance according to Vietnam Labor Law
Premium Health Care Insurance
Lunch and parking allowances
Team building, quarterly engagement activities
14 Annual Leaves
Annual Performance Review
Attractive career path
ESOP

CONTACT

PEGASI – IT Recruitment Consultancy | Email: recruit@pegasi.com.vn | Tel: +84 28 3622 8666
We are PEGASI – IT Recruitment Consultancy in Vietnam. If you are looking for new opportunity for your career path, kindly visit our website www.pegasi.com.vn for your reference. Thank you!

Job Summary

Company Type:

Product

Technical Skills:

Security, Cloud

Location:

Ho Chi Minh - Viet Nam

Working Policy:

Job ID:

J00829

Status:

Close

Related Job:

Junior Embedded Linux Middleware Engineer

Ho Chi Minh - Viet Nam


Outsource

  • Embedded
  • C/C++

Responsible for designing, developing, and testing middleware/framework for SoC platforms. Conduct Integration Testing, Unit Testing, and Functional Testing. Create technical documentation and develop sample applications for the product. Work closely with various teams to ensure successful project delivery. Identify, report, and resolve technical issues.

Negotiation

View details

Lead Penetration Tester

Ho Chi Minh, Ha Noi - Viet Nam


Outsource

  • Security

Conduct authorized penetration testing for various digital platforms, including web applications, mobile applications, APIs, infrastructure, and cloud environments. Identify and document security vulnerabilities, validate and exploit when necessary, covering areas such as authentication, authorization, session management, input validation, encryption, access control, and business logic issues. Perform security assessments according to industry standards (e.g. OWASP Top 10, OWASP API Security Top 10, OWASP Mobile Security Testing Guide) and relevant security practices. Analyze application flows, user journeys, transaction processes, access controls, and data handling mechanisms to uncover potential security risks. Conduct vulnerability assessment and manual verification to reduce false positives, confirming actual exploitability in authorized environments. Retest to validate remediation effectiveness and ensure vulnerabilities are properly resolved. Support security testing activities within the software development life cycle (SDLC), including security requirement review, threat analysis, test planning, and release security validation. Stay updated with emerging cyber threats, attack techniques, security risks, and security testing best practices. Lead the planning, scoping, and execution of penetration testing activities across assigned projects. Define the penetration testing approach, test strategy, testing scope, priorities, timelines, and required evidence based on project and client requirements. Guide and mentor penetration testers or security engineers in testing methodology, vulnerability validation, reporting quality, and remediation discussions. Review vulnerability findings, risk ratings, evidence, and remediation recommendations to ensure accuracy, consistency, and practical value. Serve as the main technical point of contact for penetration testing activities, working with client stakeholders, security teams, development teams, DevOps, infrastructure teams, and compliance teams. Facilitate vulnerability walkthroughs, risk clarification sessions, remediation discussions, and retesting alignment with relevant stakeholders. Support estimation, planning, status tracking, issue escalation, and delivery reporting for security testing activities. Contribute to improving security testing processes, reporting templates, testing checklists, knowledge sharing, and reusable testing practices. Support regulatory, audit, and compliance requirements by providing security testing evidence, reports, remediation status, and technical clarification when needed.

Negotiation

View details

Senior Embedded Linux Middleware Engineer

Ho Chi Minh - Viet Nam


Outsource

  • Embedded
  • C/C++

Create middleware/framework for SoC platforms. Conduct Integration Testing, Unit Testing, Functional Testing. Generate technical documentation and build sample applications for the product. Work with various teams to ensure project completion. Recognize, report, and resolve technical issues.

Negotiation

View details