DevSecOps Engineer (HCMC, Hanoi)

Job Summary:  The DevSecOps Engineer is responsible for embedding security at every stage of the software development lifecycle (SDLC) - from initial design and development to deployment and operations. This role introduces processes, tools, and methodologies that prioritize secure coding practices, infrastructure hardening, automated compliance, and proactive threat detection, while supporting scalability and continuous delivery in cloud-native environments.

Essential Functions:

• Infrastructure Design & Automation: Design, implement, and maintain secure infrastructure using Infrastructure as Code (IaC) tools (e.g., Terraform, CloudFormation) with a focus on compliance, cost efficiency, and security
• Security Integration: Develop and enforce security controls within CI/CD pipelines, integrating automated scanning tools (e.g., SAST, DAST, SCA) to detect vulnerabilities and ensure secure deployments
• Cloud Management: Architect and manage secure cloud environments (AWS, Azure, GCP), including containerized workloads with hardened images and Kubernetes security policies
• Monitoring & Incident Response: Implement and manage logging, monitoring, and alerting solutions (e.g., SIEM tools, Prometheus, Grafana) for threat detection and incident response
• Collaboration & Culture: Promote secure development practices, train teams on emerging security methodologies, and collaborate with stakeholders to ensure security by design
• Cost Management: Monitor and optimize cloud costs while maintaining security compliance

The most successful candidates for this role will have:

• Technical Proficiency: Expertise in IaC tools (Terraform, CloudFormation), container security (Docker, Kubernetes), and cloud platforms (AWS, Azure, GCP)
• Security Best Practices: Strong knowledge of security frameworks (OWASP, NIST, CIS) and secure development principles
• Automation & Scripting: Skilled in scripting languages (Bash, Python, PowerShell) for automation and system integration
• System Administration: Solid experience with Linux/Windows hardening and configuration management tools (Ansible, Chef, Puppet)
• Communication & Collaboration: Excellent communication skills to promote security best practices and collaborate across teams

Nice to have:

• Familiarity with the .NET platform and secure coding practices

AI Fluency:

• This role operates in an AI-augmented environment
• We expect fluency in using AI tools to accelerate your own work, and the judgment to critically evaluate and correct AI output rather than take it at face value