Senior Security Engineer DevSecOps

Implementation, Oversee and fine- tune SIEM (Security Information and Event Management) solutions to detect and respond to security incidents.
Monitor network, endpoint, and cloud environments for vulnerabilities, threats, and anomalies.
Investigate security alerts and take proactive steps to prevent potential breaches.
Implement Security Orchestration, Automation, and Response (SOAR) tools to enhance incident response efficiency.

Lead incident response activities, including threat containment, eradication, and recovery.
Develop and maintain Incident Response Plans (IRP) and ensure team readiness for cyber- attacks.
Conduct forensic investigations and root cause analysis on security incidents.
Collaborate with SOC teams to enhance threat intelligence capabilities.

Work with DevOps, IT, and product teams to remediate security weaknesses.
Regularly conduct vulnerability assessments and penetration testing on internal and external systems.
Ensure timely patching and updates to reduce attack surface.

Enforce security configurations in line with NIST, ISO 27001, CIS Benchmarks, and other industry standards.
Implement best practices for system hardening across Windows, Linux, cloud, and container environments.
Ensure compliance with Vietnamese cybersecurity regulations and global security frameworks.

Work closely with developers to integrate application security testing (SAST, DAST, IAST) into CI/CD pipelines.
Conduct security architecture reviews to identify potential risks in new applications and systems.
Secure cloud- based environments (GCP, Azure) and ensure secure DevOps (DevSecOps) practices.

Yêu cầu công việcEducation & Experience

Bachelor’s degree in information security, Computer Science, Risk Management, or related fields.
Familiarity with offensive security tools (Kali Linux, Metasploit, Burp Suite) and defensive tools (EDR, XDR, WAF).
Hands- on experience with SIEM (Splunk, ELK, QRadar, Microsoft Sentinel, etc.).
3 + years of experience in Security Operations (SecOps), Incident Response, or Cloud Security.
Strong knowledge of intrusion detection systems (IDS/IPS), firewalls, and endpoint protection.
Experience with SOC operations, threat hunting, and security automation.

Excellent problem- solving skills and the ability to handle high- pressure situations....
Strong knowledge of cyber threat intelligence, malware analysis, and digital forensics.
Proficiency in scripting (Python, Bash, PowerShell) for automation.
Understanding of zero- trust security models, IAM, and privileged access management.

Benefits

13th salary
Annual health check
Social Insurance
15 days annual leave
Holiday bonus
Transportation fee (BE&039;s services)
Team Building and many engagement activities
Performance bonus
Medical healthcare

Cập nhật gần nhất lúc: 2025-09-22 15:50:02