Security Engineer – Security Assessment, Monitoring & Consulting

Security Assessment

• Perform vulnerability scanning of customers' servers, networks, web applications and cloud infrastructure.
• Review security configurations (OS, firewall, network devices, cloud) against standards such as CIS Benchmarks and OWASP.
• Participate in basic penetration testing within the scope approved by the customer.
• Prepare assessment reports, classify risk levels and recommend remediation actions.

Security Monitoring

• Monitor security events, system logs and alerts from SIEM/EDR/IDS/IPS/WAF for customer environments.
• Analyze and triage alerts, detect anomalous activity and provide initial incident response.
• Coordinate with TechValley's infrastructure/cloud operations team and the customer to contain and resolve incidents.
• Prepare periodic (weekly/monthly) monitoring reports for customers.

Security Consulting

• Advise customers on security architecture, information security policies and procedures.
• Support customers in complying with Vietnamese regulations on cybersecurity, information security and personal data protection, including security of information systems by level.
• Support preparation for standards and certifications such as ISO/IEC 27001.
• Present and explain assessment results and improvement plans to customers.

Yêu cầu công việc

• Vietnamese nationality.
• College/University degree in IT, Information Security, Computer Networking or a related field.
• At least 2 years of experience in security, system operations or network administration.
• Knowledge of networking (TCP/IP, firewalls, VPN), Linux/Windows operating systems and cloud infrastructure.
• Hands-on experience with security tools such as Nessus, OpenVAS, Burp Suite, Nmap, SIEM (Wazuh, Splunk, ELK, etc.) and EDR.
• Intermediate English: able to read technical documents, write reports and communicate in emails and meetings.
• Good report-writing and customer communication skills; honest, detail-oriented and highly responsible in protecting customer information.
• Willing to provide after-hours support or on-call incident response when required.

• Security certifications such as CompTIA Security+, CEH, CySA+, OSCP, ISO 27001 Lead Auditor/Implementer or equivalent.
• Experience working in a SOC, MSSP or security consulting firm.
• Experience with AWS, Azure, GCP or Vietnamese cloud providers.
• Korean language skills are an advantage.

Quyền lợi được hưởng

• Competitive salary, negotiable based on skills and experience.
• Social, health and unemployment insurance in accordance with Vietnamese law.
• Opportunity to work with Korean companies and multinational corporations in Vietnam.
• Support for training and professional security certifications.
• Professional, dynamic work environment with a clear career path.