SecOps Engineer

Trách nhiệm chính

• Design and implement Identity & Access Management (IAM/SSO) architecture and Single Sign-On integration across internal applications.
• Design and implement Privileged Access Management (PAM) and Zero Trust Network Access (ZTNA) / identity‑aware proxy solutions.
• Design and implement network security architecture, including segmentation, firewalls, VPN, and secure remote access.
• Build infrastructure using Infrastructure‑as‑Code (Terraform, Ansible) and version‑controlled configuration where applicable.
• Support the hardening of the company's Kubernetes platform: RBAC design, network policy, workload security baseline, secrets management.
• Contribute to the rollout of Policy‑as‑Code (e.g., Kyverno, OPA) for cluster governance.
• Collaborate with the current Cluster Admin to reduce single‑point‑of‑failure risk and support knowledge transfer / documentation.
• Support the design, implementation, and day‑to‑day operation of the company's SOC capabilities (SIEM, EDR, log management, monitoring pipelines).
• Contribute to detection rule and alert logic development as SOC capability is built out.
• Participate in security event investigation, containment, and remediation activities.
• Contribute to DFIR playbooks, escalation paths, and evidence‑handling procedures.
• Assist in tabletop exercises and simulations to validate incident response readiness.
• Collaborate with IT, InfraOps, AppSec, and Red Team functions to close security gaps.
• Document architecture decisions, runbooks, and lessons learned.
• Contribute to security policies, standards, and compliance initiatives (ISO 27001, etc.) in collaboration with the GRC team.

Yêu cầu công việc

• 2-3+ years of experience in security engineering, infrastructure/platform engineering, SRE, or DevSecOps.
• Hands‑on production experience operating Kubernetes — RBAC design and troubleshooting, network policy, workload/container security fundamentals.
• Practical experience designing or implementing at least one of: IAM/SSO (e.g., Keycloak, Okta, Azure AD), PAM, ZTNA / identity‑aware proxy, or network security architecture (firewall, segmentation, VPN).
• Strong Linux system administration and scripting/automation skills (Python, Bash, PowerShell, or similar).
• Familiarity with Infrastructure‑as‑Code and/or GitOps concepts (Terraform, Ansible, ArgoCD/Flux, or equivalent).
• A proactive attitude & the ability to think outside of the box.
• Works in an organized, structured manner; can‑do attitude, gets things done.
• Excellent communication skills with diverse audiences.
• Strong critical thinking and analytical skills.

Yêu cầu ưu tiên

• Experience with SIEM platforms (ELK Stack, Wazuh, Splunk, Graylog) or EDR tools.
• Foundation skills in log analysis, network traffic analysis, or malware analysis.
• Solid understanding of security frameworks (MITRE ATT&CK, NIST CSF, CIS Benchmarks).
• Foundation knowledge in AI integration for security operations.
• English communication.
• Relevant certifications: CKA/CKS, Security+, GCIA, GCIH, or equivalent.

Phúc lợi

• Annual bonus: 2 - 3 months under minimum KPI requirement.
• Fast promotion opportunities based on personal ability.
• Work in a dynamic, open, creative environment.
• Regular training, company team building, birthday bonus.

Thông tin khác

• Working time: 8:30 - 17:30 Monday - Friday.
• Working place: 5th Floor, Con Cưng Super Center, 09 Nguyen Trai Street, Ben Thanh Ward, Dist. 1, HCMC.