Platform Security Engineer

Enginering Risk Management Computer Science Security DevOps Cloud Software Development CI/CD Google Cloud Platform Network Security

Salary

Negotiable

Location

Ho Chi Minh

Benefits

Full social insurance

Flexible working time

Salary review

Travel/company trips

Laptop/desktop for works

Performance bonus

Extra health insurance

13th month salary

Others

Work-from-home policy

Job Overview And Responsibility

We are looking for a Security Consultant/Expert who will take the following responsibilities: • Provide architectural consulting expertise across multiple domains and projects • Develop architectural specifications which ensure good security practices and management of cyber risks within the security environment • Present these architectural decisions at relevant forums to gain necessary approvals • Assess the operational security requirements for specific projects • Perform security assessments as requested • Evaluate technology risk, security and compliance standards • Identify and assess information security exposures introduced/impacted with the application or business change • Identify additional controls relevant for the change • Advise if solutions meet ANZ Bank’s information security standards and reference architectures • Confirm, certify and advise on compliance with cyber security regulations such as APRA-CPS234, GDPR, IRAP, PCI-DSS • Advise on application security vulnerabilities and complete automated security checks • Manage stakeholder relationships across the tribe – be the conduit between security and the business

Required Skills and Experience

 Qualifications • Bachelor’s or Master’s degree in Computer Science, Information Security or a related field • At least 7-10 years of experience in cyber security (preferably in the financial sector)  Must-have skills • Professional certifications such as CISSP, CISM, CEH or the equivalent • In-depth knowledge of security frameworks and standards (e.g., NIST, COBIT) • Proven experience with security technologies such as firewalls, intrusion detection/prevention systems, SIEM and encryption • Experience in developing architectural specifications which ensure good security practices and management of cyber risks within the security environment • Experience in security risk analysis, assessment and mitigation • Experience with Cloud security (we prefer Google Cloud Platform (GCP) but either AWS Cloud or Azure Cloud is fine), DevSecOps and application security • A knowledge of emerging security threats and mitigation strategies • A knowledge of software development lifecycle, CI/CD tools and performing code reviews • Contributions to Vulnerability Management findings, triage and action recommendations • Research and analysis skills to identify new security automation opportunities • Ability to communicate effectively with security and non-security stakeholders to solve everyday problems • Excellent command of English verbal communication • Good mindset when working directly with customer (High adaptability with continuous changes in customer’s requirements) • Strong analytical, problem-solving and decision-making skills Preferred Qualifications: University or College Required Skills: • Cloud • Security • Software Development (Coding) • DevOps • Good English communication

Why Candidate should apply this position

- Attractive package including base salary + 13th month salary + Performance Bonus. - Insurance based on full base salary and Medical Benefit (Bao Viet Insurance Package) for Employee and Family - 100% of full salary and benefits as an official employee from the 1st day of working - 100% salary during probation time - Working in a fast paced, flexible, and multinational working environment with opportunity to travel onsite (in 60 countries) - Internal Training (Technical & Functional & English) - Working with outstanding colleagues coming from top universities and top companies in Vietnam and foreign countries

Preferred skills and experiences

 Nice-to-have skills • A background in financial services security and compliance • A knowledge of Google Cloud Platform (GCP) and Kubernetes • Experience in designing controls for SaaS- and PaaS-based services • Experience in the design and architecture of new software systems and integrations • Strong development experience in languages such as Go, Java or the similar • Experience mentoring junior/mid-level software engineers.