Mô tả công việc
I. Job Overview
FE Credit is looking for a Cloud Security Engineer Expert with over 6 years of experience to join the Information Security team. In this role, you will be primarily responsible for designing, building, monitoring, and optimizing the security architecture across our multi-cloud infrastructure (AWS, OCI, VNG Cloud). Given the nature of the financial industry, this position requires a proactive, prevention-oriented mindset and deep understanding of strict compliance standards and regulations to protect data integrity and customer assets.
II. Key Responsibilities
- Design & Architecture: Design and implement security architecture, establish secure network zone designs (Landing Zones), identity and access management (IAM), and security controls across the multi-cloud environment (AWS, Oracle Cloud Infrastructure – OCI, VNG Cloud).
- Monitoring & Early Detection: Build, configure, and optimize the security monitoring ecosystem (SIEM, SOAR, CloudTrail, OCI Logging) to detect, analyze, and respond promptly to cloud security incidents 24/7.
- Vulnerability & Configuration Management: Manage and operate CSPM (Cloud Security Posture Management) and CWPP (Cloud Workload Protection Platform) solutions to continuously scan for vulnerabilities and control misconfigurations across cloud platforms.
- Data Security: Implement data encryption solutions (at rest/in transit), key management (KMS/HSM), and data loss prevention (DLP) solutions suited to the organization's financial cloud infrastructure.
- Assessment & Testing: Collaborate with the Pentest team to conduct periodic penetration testing on cloud infrastructure; assess the security of cloud services before deployment to Production.
- DevSecOps: Integrate automated security testing tools (SAST/DAST) into CI/CD pipelines, promoting a DevSecOps culture throughout the packaging and deployment of financial applications on the cloud.
- Compliance: Ensure the multi-cloud infrastructure consistently complies with strict financial industry security standards such as PCI-DSS, ISO 27001, NIST, and regulations issued by the State Bank of Vietnam.
Yêu cầu công việc
Experience:
- Minimum 6 years of hands-on experience in Cloud Security or Information Security, including at least 3 years directly managing multi-cloud security. Experience working in Financial Services, Banking, FinTech, or Insurance organizations is preferred.
Technical Foundation:
- Proficient in configuring security on AWS (GuardDuty, IAM, Security Policy, KMS) and OCI (Cloud Guard, Security Zones).
- Experience implementing and flexibly adapting security solutions on domestic cloud infrastructure such as VNG Cloud.
- Deep understanding of Container security (Docker, Kubernetes/EKS/OKE) and Network Security (Virtual Firewall, WAF, VPN, VPC/VCN peering).
- Ability to write automation scripts (Python, Bash, PowerShell) and experience with Infrastructure as Code (Terraform, CloudFormation) from a security perspective.
Professional Certifications (is a plus):
- Advanced Cloud Security certifications such as: AWS Certified Security – Specialty, Oracle Cloud Infrastructure Security Professional.
- International security certifications: CCSP (Certified Cloud Security Professional), CISSP, CEH, or CHFI.
- AI Security certification.
Soft Skills:
- Strong analytical thinking and ability to work well under the high-pressure conditions typical of the financial industry.
- Good English communication and technical documentation reading skills.
- Strong teamwork and independent working abilities.
