Trách nhiệm chính

• Monitor security alerts, logs, and dashboards; triage and escalate findings to the Senior Security Lead as needed.
• Support day‑to‑day cloud security hygiene checks (primarily AWS, also GCP) – e.g., IAM reviews, misconfiguration checks, and basic remediation.
• Help maintain security tooling and automation scripts used across the team.
• Assist with security architecture reviews for new and existing systems under senior guidance.
• Run and interpret basic SAST/DAST scans, and help track findings through to remediation with engineering teams.
• Support secure configuration of containerized environments (Docker).
• Assist with Kubernetes/CI‑CD pipeline security and reviewing AI‑driven features or LLM integrations for common risks under senior guidance.
• Support incident response activities – gathering logs, documenting timelines, and assisting with remediation tasks under the direction of the Senior Security Lead.
• Assist with penetration testing and red‑team exercises (internal or vendor‑led), including evidence collection and findings tracking.
• Coordinate logistics with external vendors and consultants when supporting pentesting or peak‑demand engagements.
• Work with engineering teams to communicate security findings clearly and help get fixes prioritized.
• Take on structured learning goals (certifications, tooling, frameworks) with support and mentorship from the Senior Security Lead.
• Document processes, runbooks, and findings to build the team’s institutional knowledge.

Yêu cầu

• 1–2 years of experience in security engineering, IT, software engineering, or a related technical field (internships and hands‑on personal/academic projects count).
• Genuine interest in security engineering and a desire to grow into a hands‑on technical role.
• Able to communicate findings clearly in writing, and comfortable asking questions and seeking guidance.
• Degree or equivalent practical experience in Computer Science, Information Security, or a related field; relevant certifications (e.g., Security+, eJPT) are a plus, not required.

Yêu cầu ưu tiên

• Basic understanding of cloud fundamentals (AWS preferred; GCP a plus) – IAM, networking, and common services.
• Familiarity with at least one scripting/programming language (e.g., Python, Bash, Go) for automation tasks.
• Exposure to or coursework in application security concepts (OWASP Top 10, common vulnerability classes).
• Basic familiarity with containerized environments (Docker) and version control (Git); Kubernetes exposure is a plus.
• Curiosity about AI/LLM security concepts is a plus – prior experience not required.
• Comfortable working under supervision, taking direction, and escalating issues appropriately.
• Willing to learn Zalora’s and GFG’s security standards and apply them consistently in day‑to‑day work.
• Able to work collaboratively with engineering teams across time zones and markets.

Phúc lợi

• The unique opportunity to have a serious impact on a growing organisation
• A dynamic working environment shaping the face of fashion e-commerce in growth markets
• Best practice scaled agile engineering
• Amazing office and great culture! Massage chairs, table tennis, video game room, quarterly team events, yearly company trip, end of the year party
• Hybrid working environment.
• Clear career progression plan and support
• Macbook or laptop when you start
• Social insurance, medical insurance & health insurance
• 13th month salary
• 15 days of annual leave, 30 days of sick leave, 1 day of occasion leave

Hình thức làm việc

• Hybrid working environment.

Thông tin khác

• ZALORA operates engineering teams in Singapore and Vietnam to serve millions of users across Southeast Asia.
• The role is based in Thành phố Hồ Chí Minh, Vietnam.