Techcombank

Overview of job

Techcom Life – A Proud Member of Techcombank Ecosystem

As part of Techcombank’s integrated financial ecosystem, Techcom Life is built on a strong foundation of Health and Wealth, with a mission to empower individuals to live life to the fullest. We accompany each customer on their journey to achieve their aspirations, delivering holistic financial and well-being solutions that create lasting value.

Guided by the belief that true growth comes from the harmony of strength, security, and balance, Techcom Life brings together innovation, expertise, and care to help life grow bigger every day.

JOB PURPOSE

The Expert, DevSecOps is a senior technical leader responsible for designing, implementing, and optimizing the organization’s DevSecOps ecosystem. This role bridges development, operations, and security teams to ensure seamless integration of security throughout the software development lifecycle (SDLC). The expert drives automation, process improvement, and technical excellence across platforms and teams

KEY ACCOUNTABILITIES 

1. DevSecOps Factory Design & Optimization
- Architect and enhance CI/CD pipelines with a focus on security, scalability, and performance
- Optimize key delivery metrics: Lead time, Deployment frequency, MTTR, Change failure rate
- Integrate automated security testing tools: SAST (Static Application Security Testing); DAST (Dynamic Application Security Testing); IAST, RASP, API Security Scanners
- Automate end-to-end testing and validation across staging and production environments
- Coordinate continuous deployment of services and platforms with minimal risk
2. Security Governance & Monitoring
- Establish continuous security monitoring for applications and platforms
- Conduct penetration testing, fuzzing, and threat modeling
- Integrate security tools into the DevSecOps toolchain: SonarQube, Checkmarx, Fortify, OWASP ZAP, Burp Suite; HashiCorp Vault, Aqua Security, Prisma Cloud, Snyk
- Collaborate with operations teams to respond to security incidents and perform root cause analysis

3. Compliance & Process Optimization
- Implement automated business value verification and defect detection
- Build dynamic, customizable dashboards for security reporting and stakeholder visibility
- Ensure compliance with internal policies and international standards: OWASP Top 10, ISO 27001, NIST, PCI-DSS, GDPR
- Support internal audits and external security assessments

4. Collaboration & Enablement
- Work closely with development, QA, and operations teams to embed security practices
- Mentor team members on DevSecOps principles, tools, and workflows
- Promote a culture of “Security by Design,” “Shift Left,” and “Security as Code”
- Recommend process improvements and foster cross-functional collaboration

WHY BECOME IT/DATA EXPERTS AT TECHCOMBANK?

• Investing over 500 million USD to develop large-scale IT projects, Techcombank is one of the leading bank in Technology trends in Vietnam
• You will grow with Techcombank by having the opportunity to learn from top experts from across the world
• Techcombank provides a rewarding remuneration structure that commensurate with your achievement and contribution
• Techcombank is the Top 2 Best place to work in the banking industry where you can experience various exciting activities throughout the year: Company anniversary, Team building, Active Saturday , Year End Party, etc.