Live Group

Tóm tắt công việc

Live group is seeking an experienced DevSecOps Engineer to join our growing/ multi-national team. Reporting
directly to our Vietnam based Team Leader, the DevSecOps Engineer will work closely with the development
team to design and review technical solutions from a security perspective.
The role will be required to:
• Research and apply solutions for application security testing including Static Application Security
Testing (SAST), Dynamic Application Security Testing (DAST) or Interactive Application Security
Testing (IAST)
• Automating security assessments to make the global security team more efficient including
integrating systems and processes together and ultimately finding security flaws.
• Perform penetration tests and code reviews to improve software security.
• Review code to ensure output from development team is 'secure code'.
• Continually improving the security posture of the various products and service offerings.
• Threat modelling and penetration testing.
• Promote culture and practices of DevOps principles.
• Consult and assist development team to implement CI/CD process.
• Apply automated security code review
• Coaching and mentoring of other Engineering team members on adopting Cloud services and
improving existing solutions residing in AWS

• Gross salary which includes tax, medical, social and unemployment insurance
• Performance reviews twice a year
• 13th month salary and performance bonuses
• 14 days annual leave
• Laptop
• Free parking, coffee, and snacks
• Premium healthcare plan
• Access to paid learning and development programs
• Regular team dinners and team building activities
• International, friendly working environment

Bachelor’s degree in Computer Science, Information Technology, or another related field
• Experience in Security planning, coordinating, executing, and reporting of tasks.
• Knowledge of the methods, processes, and procedures to execute security testing.
• Solid understanding of web application development and penetration testing.
• Exposure to DevOps automation like Orchestration/Configuration Management and CI/CD tools
(Jenkins) for integrating product security lifecycle with CI/CD pipelines.
• Experience reviewing source code (C#, NodeJS, ReactJS, HTML, JavaScript) to ensure it follow best
practices from the security perspective.

• Experience of cloud security (AWS).
• Good English communication skills (written and oral).
• Good interpersonal and collaboration skills combined with a strong team working ability.
• Experience working in the payments and/or financial services industries is an advantage.
• Experience in Microsoft development stacks such as MS SQL Server, SSRS, .Net framework, IS