IT Information Security Engineer

TP. Ho Chi Minh

Posted November 11, 2026

OBJECTIVE

Ensure the level of security and compliance in line with internal IT security documentation and legal/regulatory requirements.
Provide business stakeholders with the explanation of security risks, controls, and measures applied on behalf of IT Security.
Ensure the level of security and compliance in line with Internal IT Security documentation and legal/regulatory requirements.

Manage daily Security Operations, including monitoring, investigation, incident response, troubleshooting, and continuous improvement.
Operate and improve security platforms such as SIEM, EDR/XDR, PAM, IAM, Vulnerability Management, DLP, and most of Cloud Security solutions.
Support endpoint security and troubleshooting across Windows and macOS environments.
Analyze security alerts and findings, identify root causes, assess business impact, and recommend practical remediation.
Develop and tune SIEM use cases, correlation rules, alerts, dashboards, and detection capabilities.
Automate security activities using PowerShell, Python, REST APIs, n8n, SOAR, or similar technologies.
Embed security into the software delivery lifecycle by supporting DevSecOps practices, including CI/CD security controls, secure code scanning, dependency and container scanning, secrets management, and remediation tracking.
Collaborate with development and platform teams to integrate tools such as SAST, DAST, SCA, container security, and Infrastructure-as-Code scanning into delivery pipelines.
Work closely with Infrastructure, Network, Cloud, Application, Helpdesk, Risk, and business stakeholders to resolve security issues.
Support security projects, audits, compliance activities, vulnerability remediation, and regulatory requirements.
Improve security processes, documentation, automation, and overall operational effectiveness.

Need-to-have areas

Min 2 years of hands-on experience in Cybersecurity, SOC, IT Security Operations, or related roles.
Good knowledge of SIEM, EDR, PAM/IAM, Vulnerability Management, Endpoint Security, Networking, Windows, Linux, macOS, and Cloud Security.
Practical understanding of SecOps and CI/CD security, with exposure to tools such as GitLab CI/CD, GitHub Actions, Azure DevOps, SonarQube, Trivy, or equivalent platforms.
Experience with PowerShell, Python, APIs, security automation, and Git-based workflows is highly preferred.
Strong analytical, investigation, root-cause analysis, and troubleshooting skills.
Ability to translate technical security issues into business risk, impact, priority, and recommended actions.
Strong ownership, accountability, proactive attitude, and willingness to handle critical operational issues.
Good communication and collaboration skills when working with technical teams and business stakeholders.
Willingness to learn new technologies and continuously improve the security environment.

Nice-to-have areas

Experience applying AI/GenAI to cybersecurity, SOC, or security automation use cases.
Ability to prototype AI-assisted threat detection, alert analysis, investigation, and preventive recommendations.
Experience integrating AI with security tools using Python, APIs, n8n/SOAR, or similar automation technologies.
Knowledge of AI security risks and secure adoption of AI within enterprise environments.
Experience participating in enterprise AI projects, PoCs, testing, AI agents, or security-focused AI initiatives is a strong advantage.

If you are referred for this position by our Employee/Recruitment Collaborator, please apply via this LINK.

If you are an internal candidate, please apply via this LINK

Otherwise, please click the Apply button as below for application