Chotot

Overview of job

Carousell Group’s security team is seeking a security talent who has a solid technical background in application security. You will become the primary security expert for multiple product lines, and act as the point of contact for engineering and security.

What will you be doing?

• Perform security reviews/threat modelling to steer projects in the right direction early, participate in security code reviews, and perform penetration testing against products prior to shipping.
• Promote the adoption of secure coding practices and provide comprehensive training to engineering teams.
• Develop, document, and maintain security and compliance capabilities in support of DevOps processes.
• Expertise finding and fixing common security vulnerabilities (e.g., OWASP Top 10)
• Performing technical security assessments on our web applications, native clients, internal services
   

• Join plenty of Sharing and Learning activities as part of our initiatives to contribute to the tech community in Vietnam
• Get 15 days of annual leave and 5 days of sick leave per year
• Health insurance for employee and their family members
• Get a Macbook Pro as your workstation
• Get 13th month salary and annual performance bonus
• Participate in regular team building activities and company parties
• Get opportunities to attend training courses abroad
• Most importantly, the code you write will be impacting the lives of millions!

• 3+ years of demonstrated experience in CyberSecurity, preferred to be in Software/E-commerce companies
• Hands-on experience in implementing and operating modern SDLC stack tooling (SAST/SCA/DAST/IAST).
• Programming skills in at least one: Go, Java, Python, NodeJS, etc.

Preferred qualifications:

• Production experience in security testing of web applications and native apps
• Strong understanding of web application architecture and design principles
• Background in software engineering in a collaborative and dynamic environment