Tuyển dụng Remote - Cyber-Security Manager OWASP, AWS tại Hồ Chí Minh

You know how to find the gaps. Now take ownership of closing them.

Our client is a fast-growing international technology company building and operating large-scale digital platforms across multiple markets. As the business expands, so does the complexity of protecting its systems, infrastructure, users and transactions.

They are looking for a hands-on Cybersecurity Manager to build and lead the security function from the ground up. You will have direct access to management, ownership of the security roadmap, and the authority to decide where the business needs to strengthen its defenses.

This is not an audit or policy-only position. You need to know how to test, find weaknesses, manage incidents and make sure security issues actually get fixed.

About the role

You own security end to end: testing, risk assessment, external security partners, incident response and team development. You will work closely with engineering and management, covering everything from application and infrastructure security to cloud environments and platform integrity.

The expectation is simple: understand where the risks are, know how serious they are, and take ownership of getting them resolved.

What you will do

• Build the company's security strategy and roadmap, deciding what needs attention first and where resources should be invested.
• Establish and lead the security function, building the team as the business grows.
• Lead security assessments across web applications, APIs, infrastructure and cloud environments.
• Maintain a clear inventory of company assets and a risk register to identify and track potential exposure.
• Manage external security specialists and assessment partners, ensuring identified issues are properly addressed and closed.
• Identify weaknesses in platform workflows, user accounts and transaction processes, including potential misuse and unauthorized activities.
• Conduct simulated social engineering exercises and improve security awareness across the organisation.
• Establish vulnerability management, security monitoring and incident response processes.
• Work closely with engineering teams to review new features, strengthen application security and integrate security practices into development.
• Take charge of security incidents, coordinating containment, investigation and communication with management.
• Present security risks and progress to leadership in clear, business-focused terms.

What you need

• 8+ years of experience in cybersecurity, with strong hands-on experience in security testing or security engineering. Pure audit, compliance or policy backgrounds will not be suitable.
• Strong knowledge of web application and API security, infrastructure testing, network security and cloud environments (AWS).
• Ability to identify complex application weaknesses and business workflow vulnerabilities, beyond relying on automated testing tools.
• Experience leading security incidents, including containment, investigation and communication with senior management.
• Previous experience directly managing and developing a technical team.
• Experience working with external security consultants and managing specialist assessment engagements.
• Ability to work closely with engineering teams and translate technical findings into practical solutions.
• Strong ownership mindset, attention to detail and ability to work independently.
• Good English communication skills.

Good to have:

• Experience securing high-traffic consumer-facing digital platforms.
• Experience with platforms involving user accounts, online payments and complex transaction flows.
• Background in fintech, gaming or other transaction-heavy technology environments.

• Birthday leave
• Competitive salary package
• Learning & development opportunities