FE Credit

Overview of job

I. Job Overview

FE Credit is looking for a Cloud Security Engineer Expert with over 6 years of experience to join the Information Security team. In this role, you will be primarily responsible for designing, building, monitoring, and optimizing the security architecture across our multi-cloud infrastructure (AWS, OCI, VNG Cloud). Given the nature of the financial industry, this position requires a proactive, prevention-oriented mindset and deep understanding of strict compliance standards and regulations to protect data integrity and customer assets.

II. Key Responsibilities

• Design & Architecture: Design and implement security architecture, establish secure network zone designs (Landing Zones), identity and access management (IAM), and security controls across the multi-cloud environment (AWS, Oracle Cloud Infrastructure – OCI, VNG Cloud).
• Monitoring & Early Detection: Build, configure, and optimize the security monitoring ecosystem (SIEM, SOAR, CloudTrail, OCI Logging) to detect, analyze, and respond promptly to cloud security incidents 24/7.
• Vulnerability & Configuration Management: Manage and operate CSPM (Cloud Security Posture Management) and CWPP (Cloud Workload Protection Platform) solutions to continuously scan for vulnerabilities and control misconfigurations across cloud platforms.
• Data Security: Implement data encryption solutions (at rest/in transit), key management (KMS/HSM), and data loss prevention (DLP) solutions suited to the organization's financial cloud infrastructure.
• Assessment & Testing: Collaborate with the Pentest team to conduct periodic penetration testing on cloud infrastructure; assess the security of cloud services before deployment to Production.
• DevSecOps: Integrate automated security testing tools (SAST/DAST) into CI/CD pipelines, promoting a DevSecOps culture throughout the packaging and deployment of financial applications on the cloud.
• Compliance: Ensure the multi-cloud infrastructure consistently complies with strict financial industry security standards such as PCI-DSS, ISO 27001, NIST, and regulations issued by the State Bank of Vietnam.

See yourselves in a new light

In essence of joining our company, you will be given the scope to seize every opportunity and helped to acquire specific competencies you’ll need to succeed either you wish to go wide or go deep. Our company prides ourselves on our underpinned principle of nurturing people in not only HR policies but also in our culture. We value innovations and we need people to work on initiatives and carry on our business vision of operating excellence and market leadership.

Alongside with these, we believe our staff members deserve a good working condition, so that in addition to social health insurance you will be accessible to health and accident insurance and will be eligible to join in team building every year. We also value your efforts; for this reason, we give you both financial and non-financial rewards such as: KPI bonus, Best Initiatives, Best performer or Best manager of the year, etc.

Company's Benefits

• Financial support:
  • Probation with full salary
  • Lunch allowance
  • Wedding support
  • Family funeral support
  • 13th month salary + KPIs bonus
  • Performance rewards and awards
• Healthcare Insurance
• Events and activities:
  • Christmas
  • Year End party
  • Team Building
  • Family Day
  • Sport Day

Experience:

• Minimum 6 years of hands-on experience in Cloud Security or Information Security, including at least 3 years directly managing multi-cloud security. Experience working in Financial Services, Banking, FinTech, or Insurance organizations is preferred.

Technical Foundation:

• Proficient in configuring security on AWS (GuardDuty, IAM, Security Policy, KMS) and OCI (Cloud Guard, Security Zones).
• Experience implementing and flexibly adapting security solutions on domestic cloud infrastructure such as VNG Cloud.
• Deep understanding of Container security (Docker, Kubernetes/EKS/OKE) and Network Security (Virtual Firewall, WAF, VPN, VPC/VCN peering).
• Ability to write automation scripts (Python, Bash, PowerShell) and experience with Infrastructure as Code (Terraform, CloudFormation) from a security perspective.

Professional Certifications (is a plus):

• Advanced Cloud Security certifications such as: AWS Certified Security – Specialty, Oracle Cloud Infrastructure Security Professional.
• International security certifications: CCSP (Certified Cloud Security Professional), CISSP, CEH, or CHFI.
• AI Security certification.

Soft Skills:

• Strong analytical thinking and ability to work well under the high-pressure conditions typical of the financial industry.
• Good English communication and technical documentation reading skills.
• Strong teamwork and independent working abilities.