Total 34 failure analysis engineer job vacancies in Legal / Public / Security category in ho chi minh city

Security Engineer - IT

As a Security Engineer, you will focus on the problem of keeping our systems safe and protecting our customers while adapting to the high-speed growth of our business and our enormous scale. You will be focusing on keeping interactions on our platform as simplified as possible using advanced engineering to detect and mitigate vulnerabilities and security flaws in Xtremax’s system. The ability to perform systems security or vulnerability analysis and design is a must. 

Responsibilities: 

• Develop a set of security standards and best practices for the organization and recommend security enhancements to management as needed. Develop strategies to respond to and recover from a security breach 
• Set up, configure, and tweak security in all infrastructure systems (System, Server, Network, and Client) 
• Handle, maintain and manage various potential security threats 
• Collaborate with other team members for security design and policy 
• Doing system hardening and penetration testing 
• Doing an internal security audit 
• Handle antivirus and malware protection 
• Doing backup and restore data in our system 
• Documented all internal audit processes, such as patching, update, server access log, VAPT, and backup recovery process 
• Conducts periodic scans of networks to find any vulnerability. They also conduct penetration testing, in which they simulate an attack on the system to highlight or find any weaknesses that might be exploited by a malicious party. 
• Proactive learning, assess and utilize new technologies and concepts with customer requirements 
• Responsibility for educating the workforce on information security through training and building awareness 

• Bachelor’s Degree in Software Engineering / Computer Science / Information Technology / equivalent or relevant work experience. 
• Having good knowledge about security systems and policy 
• Good at managing sensitive and confidential data, workstation devices, patching and upgrading systems, applications, services, and other infrastructure foundational components. 
• Good at planning, developing, and implementing IT security controls that are documented and working properly. 
• Familiar with system hardening and penetration testing 
• Experience handling antivirus and malware protection 
• Familiar with ISO27001 
• Familiar with Linux and Windows OS 
• Familiar with cloud security services such as AWS, Azure, and GCP 
• Able to create some script, i.e., bash, python 
• Love to learn, assess, and utilize new technologies 
• Having certification in cloud security area is a plus 

We are looking for a Cyber Security Engineer to join our team and contribute to the continued success and growth. As a Cyber Security Engineer, you will be responsible for ensuring the security and integrity of our computer systems and networks. 

Your responsibilities include but not limited to the following:

• Security Monitoring and Incident Analysis: Robustly monitor cyber security events, triage alerts effectively and identify intrusion attempts. Requires working knowledge of cyber security practices, threat and vulnerability management.
• Incident Remediation: Collaborate with remediation teams to orchestrate incident mitigation. Requires advanced skills in incident management within a large-scale environment.
• Threat Hunting and Vulnerability Assessment: Proactively seek vulnerabilities and assess the associated risks. Requires proficiency in threat hunting, vulnerability risk assessment, and understanding of diverse operating systems and cloud environments.
• Security Tools Enhancement: Identify improvement opportunities for security tools and reduce false positives. Requires expertise in security tools.
• Playbook Optimization and Creation: Enhance current playbooks and develop new ones to address evolving threats. Requires ability in developing alert triage playbooks.
• Security Consultancy: Offer expertise to other teams and help resolve issues. Requires excellent English communication skills and ability to provide professional security consultancy.
• Research and Development: Conduct research into emerging threats and develop new capabilities. Requires skills in conducting research and developing countermeasures.
• Penetration Testing and Security Audit: Perform tests and audit cloud infrastructures for misconfigurations. Requires advanced experience in penetration testing and auditing.
• Cyber Security Investigation: Investigate incidents and perform forensic analysis. Requires skills in investigating incidents, reverse-engineering, and testing vulnerabilities.
• Threat Intelligence and Reporting: Conduct long-term retrospective analysis and provide recommendations. Requires proficiency in conducting analysis, researching threats, writing reports, and making recommendations.
• Other Security Tasks: Carry out other security-related tasks as assigned. Requires high-level analytical, lateral thinking and problem-solving skills.
• On-Call Duties: Participate in on-call rotation during weekends daytime to ensure 24/7 incident response capabilities. Requires ability to effectively respond to after-hours incidents.

About the Role 

The Security Engineer plays a crucial role in Amartha. You will be the warrior who will spearhead various Information Security programs to protect Amartha from internal and external threats.

About the team

The Information Security team in Amartha is a group of dynamic, highly-analytical  individuals who are highly mindful in driving security and privacy by design within the various aspects of product lifecycle and engineering processes. We are the team who are highly passionate to be the security enabler of Amartha’s systems

Job Desc/What will you do

• Identify current and emerging technology issues including security trends, vulnerabilities and threats through various security assessment activities (including but not limited to: . penetration testing, vulnerability assessment, etc)
• Recognize complex technical issues and managing them within a fast-paced business environment
• Perform proactive investigation to analyze security weaknesses and recommend appropriate strategies
• Perform Threat intelligence activities
• Work closely with internal and external teams to implement security solutions
• Acquire and implement new technological solutions to enhance organizational security posture
• Identify, define and document system security requirements and recommend solutions
• Monitor systems for irregular behavior and set up preventive measures
• Manage bug bounty program
• Enhance the effectiveness of security related processes through automation and orchestration

Requirements

• 5+ years of related job experience
• Excellent analytical and interpersonal skills
• Ability to express technical information clearly at different organizational levels
• Having relevant certification are preferable (e.g.  CEH,OSCP, eCPPT, Ejpt etc)
• Advance knowledge in  API Security, Mobile/Application Security, Cloud Security
• Advance knowledge in security adversarial techniques, tactics, and procedures
• Experienced in conducting Static Application Security Test (SAST) and Dynamic Application Security Test (DAST)
• Experienced in scripting using Python, Bash, Go
• Highly skilled with strong hands-on experience with various security assessment tools such as Metasploit, BurpSuite, ZAP, OWASP tools, Hydra, Netsparker, Wireshark, Apktool, nikto, Cloudbrute , Kali Linux tools, Frida, MobSF, or comparable technologies
• Familiar with Cloud Platform such as GCP, AWS 
• Tools familiarity : Python, Bash, TerraFrom, Ansible, GitHub, Jenkins, Artifactory, Jira, Terraform, Git, BurpSuite, Hydra, Nessus, NMap, Metasploit, Frida, MobSF