Senior Security Operations (Google Cloud)

Role Purpose

The Senior Security Engineer & GRC will strengthen Be Group security operations across corporate, product, and cloud environments, with Google Cloud as a primary platform. The role owns day-to-day detection, response, vulnerability management, cloud security controls, and GRC execution so security is measurable, auditable, and operationally effective.

Key Responsibilities

Security Operations & Monitoring

• Operate and continuously improve security monitoring for cloud, network, endpoint, identity, application, and SaaS environments.
• Tune SIEM/SOAR rules, alert logic, dashboards, and runbooks to reduce noise and improve detection coverage.
• Investigate alerts, triage incidents, coordinate containment, and drive remediation with Infrastructure, DevOps, Product, and Engineering teams.
• Build repeatable incident response playbooks for phishing, account compromise, malware, data exposure, cloud misconfiguration, and service abuse scenarios.
• Conduct threat hunting using logs, endpoint telemetry, cloud audit trails, and threat intelligence to identify suspicious behavior before it becomes an incident.

Incident Response, Forensics & Resilience

• Lead incident response activities from detection through containment, eradication, recovery, post-incident review, and corrective action tracking.
• Perform root cause analysis using logs, endpoint artifacts, cloud telemetry, access history, and timeline reconstruction.
• Maintain incident response plans, escalation paths, evidence handling practices, and readiness exercises for high-impact scenarios.
• Measure operational effectiveness through KPIs such as MTTD, MTTR, alert quality, control coverage, and overdue remediation items.

Yêu cầu ứng viên

Requirements

Experience & Knowledge

• Bachelor's degree in Information Security, Computer Science, Information Systems, Risk Management, or a related field.
• 3+ years of experience in Security Operations, Cloud Security, Incident Response, Security Engineering, including hands-on operational ownership.
• Solid understanding of SOC operations, SIEM/SOAR, EDR/XDR, WAF, IDS/IPS, vulnerability scanners, threat intelligence, and log analysis.
• Working knowledge of security frameworks and standards such as ISO 27001, NIST CSF, CIS Controls, OWASP, PCI DSS, and privacy/data protection requirements.

Technical Skills

• Ability to investigate cloud and identity incidents using audit logs, IAM history, network flow data, endpoint telemetry, and application logs.
• Experience with scripting or automation using Python, Bash, PowerShell, or equivalent tools.
• Understanding of zero trust, IAM, privileged access management, secrets management, encryption, secure networking, and secure SDLC practices.
• Familiarity with container, Kubernetes, CI/CD, infrastructure-as-code, and DevSecOps security practices.

Soft Skills

• Clear communication with technical and non-technical stakeholders, especially when explaining security risk and required action.
• Strong ownership, prioritization, and follow-through in high-pressure operational situations.
• Practical mindset: able to balance security requirements, business urgency, user impact, and audit expectations.

Preferred Qualifications

• Google Cloud Professional Cloud Security Engineer or equivalent hands-on Google Cloud security experience.
• Security certifications such as CISSP, CISM, CISA, GIAC, ISO 27001 Lead Implementer/Lead Auditor, Security+, or similar.
• Experience with Google Security Operations/Chronicle, BigQuery-based security analytics, or large-scale cloud log pipelines.
• Experience in technology, fintech, e-commerce, ride-hailing, logistics, or high-availability digital platform environments

Quyền lợi được hưởng

• 13th salary
• Social Insurance
• Medical healthcare
• Annual health check
• 15 days annual leave
• Transportation and flight ticket fee (BE’s services)
• Performance bonus
• Holiday bonus
• Team Building and many engagement activities