CH Resource Vietnam

Overview of job

As a Senior Application Security, you will work closely with the Development team, DevOps team, and business teams to ensure our solutions are highly secure.

You will leverage your advanced application security knowledge when leading security review sessions, participating in design sessions, defining functional requirements, and developing testing scenarios. You will ensure that risks are identified, and partner with the Application Development teams to ensure mitigation plans are developed and executed.

• Working with engineering teams on the design, development, and deployment of secure software from proof of concept to production.
• Application security assessments, including code reviews, architecture reviews, threat modeling, and penetration testing.
• Building tools to automate and integrate application security testing and compliance.
• Performing Secure Code Training to developer.
• Research and discover security bugs that can affect our code or production.

Being an Engineer at our company, you will experience a youthful, flexible and creative work environment!

• MacBook or high-end laptop for working
• Attractive salary and annual salary review
• Working in a professional, friendly, well-equipped environment both with foreigners and Vietnamese.
• Extensive on job training, you will always have a chance to work with new emerging technologies.
• Full social insurance, health insurance & unemployment insurance according to Vietnam Labor Law.
• 13th month salary.
• PVI Health Care.
• Enjoy diversified activities: Happy time every day, Monthly Team-building, Company trip, Play Game (PlayStation, board games), Play Sport (Football, Badminton...)

• Proficiency with a wide range of security tools such as Microsoft Threat Modeling tools, and IAST/SAST/DAST tools.
• Experience with GitHub and DevOps management solutions.
• Knowledgeable in SDLC, Agile and/or Waterfall methodologies.
• Knowledge of threat modeling and countermeasures.
• Experience with conducting Security Code Reviews.