DevSecOps Engineer

DevSecOps engineers will provide abilities on testing and monitoring security vulnerabilities and compliance status of our company's IT systems and cloud services by developing an automated security framework for robust deployment tools and processes, leveraging various scripting languages and appropriate solutions. Specifically, you will:

• Work closely with the development team and SRE team to identify potential security risks in the software development process and patch these weaknesses in a timely manner, and add countermeasures to prevent new threats.
• Work with our development team and SRE team to enhance security level on the existing CD/CI process.
• Support Information Security Engineers to define and implement security policies and standards related to CD/CI, SDLC, Cloud Security, Container Security areas.
• A part of the SRE team to design, deploy and deliver automation scripting and frameworks in monitoring, testing and managing security vulnerabilities in a cloud environment.
• Install, configure, and maintain security solutions deployed on operating systems, containers or cloud services.
• Support Information Security Engineers to conduct security assessment and review periodically related to privileged accounts, access rights, secure configurations, and patch management to ensure that IT systems and cloud services comply with security standards such as ISO 27001, NIST and CIS.
• Work together with Information Security engineers, SRE team and vendors to research, test and implement new security solutions.

• Bachelor's Degree in Computer Science or related IT field.
• At least 2 years of experience in Information security or related fields.
• Familiarity with API Security, Container Security, IaaS & PaaS Security and SDLC.
• Knowledge of ISO 27001, NIST 800-53, CIS and PCI-DSS Standards, Policies and audit processes.
• Strong skills with Infrastructure such as Code, security automation, scripting (ex: shell scripts, Python, Puppet, Ansible, etc).
• Capability to prepare security vulnerability and risk management reports for management.
• Ability to review, analyze and identify security risks to the organization's cloud services, containers, software development and CD/CI processes.

- Fixed 13th-month salary
- Performance bonus 1-2 months salary (excluding 13th month)
- Free Grab for work for employees (even during the probationary period - from the first day of joining the company)
- Lunch for employees (even during probation period - 1 day 5 dishes)
- 100% salary on probation
- 22 days of paid leave
- Premium health care for employees and 3 relatives (medical treatment at international standard hospitals)
- Provide MacbookPro and 27" monitor as well as necessary equipment for work
- Happy hour every Thursday (pizza, fried chicken, sushi...)
- Free coffee, tea, snacks, and [protected info]
- Comfortable working hours, no fingerprint timekeeping or card swiping.
- The company sponsors 100% of expenses for sports activities: badminton, football...
- Budget for monthly team building/ team bonding
- Yearly company trip...