DevSecOps Engineer Mid/Sr

As our first dedicated DevSecOps Engineer at Everfit, you’ll be responsible for embedding security into every stage of our development and operations processes. You’ll work closely with DevOps and engineering teams to secure our cloud infrastructure, applications, and internal systems while aligning with industry standards like ISO 27001, HIPAA, and GDPR.
You’ll also play a key role in our architectural transition from a monolith to a secure, scalable, multi- region microservices platform — ready for data- driven insights and AI/ML evolution.
What you’ll do at Everfit:
Security Engineering & Operations

Monitor security alerts and logs to detect and respond to threats.
Manage vulnerability scanning tools and patching cycles.
Conduct regular penetration tests and vulnerability assessments.

Access & Authentication

Implement SSO (Google Login) across all services.
Enforce MFA, RBAC, and the principle of least privilege.
Strengthen API authentication and authorization mechanisms.

Cloud & Infrastructure Security

Integrate security checks into CI/CD pipelines.
Apply Infrastructure- as- Code (IaC) security best practices.
Secure AWS/GCP resources, including networking and IAM.

Governance, Compliance & Awareness

Develop and enforce security policies and internal documentation.
Lead security awareness and training programs for staff.
Support internal audits and compliance efforts (HIPAA, GDPR).

Incident Response & Improvement

Provide ongoing recommendations for enhancing security posture.
Develop and maintain an incident response plan.
Stay current with emerging threats and solutions.

Yêu cầu công việc

• 3+ years in DevOps, Cloud Infrastructure, or Security Engineering.
• Good at English communication (both verbal and non- verbal)
• Hands- on experience with AWS or GCP and IaC tools (e.g., Terraform).
• Strong knowledge of Linux, containers, CI/CD, and SAST/DAST tools.
• Experience with security audits, frameworks, and controls.
• Ability to balance security with engineering velocity.
• Excellent communication and cross- functional collaboration skills.
• Ability to work in a high pressure, startup environment.

[Nice to have]

Familiarity with SOC 2 certification processes.
Prior experience in HIPAA/GDPR- compliant environments.
Experience with multi- region microservices architect, big data or AI stack.
Knowledge of least privilege principles (PoLP).
Certifications (e.g., CISSP, CISM, Security+, AWS Security).

Compensation & Benefits:

Competitive salary with 13th- month pay and performance bonus.
Full social insurance coverage (social, health and unemployment)
Quarterly performance bonuses and year- end awards.
Paid sick leave, maternity leave, and vacation days.

Work Environment:

Agile- Scrum methodology with flexible work hours.
Beautiful working environment near Danang&039;s city center (Dragon Bridge) and Hanoi office.
Talented people from all over Vietnam and the world.
International team for global career growth.
State- of- the- art equipment provided.

Health & Wellness:

PVI health care program & annual health checks.
Modern pantry for relaxation.
Sports clubs (football, badminton, pickle- ball) & company retreats.
Monthly workshop

Professional Growth:

Training, mentoring & e- learning opportunities.
1- 2 performance reviews annually.
Potential opportunities to join a fast- growing company.

Cập nhật gần nhất lúc: 2025-10-08 05:55:02