OnePAY HN

Tóm tắt công việc

The Security Administrator is responsible for operating and optimizing server infrastructure, ensuring system stability, high availability, security compliance, and supporting production deployments.

Key Responsibilities

Security Operations

• Monitor and analyze security events, alerts, and incidents.
• Investigate suspicious activities and respond to security incidents.
• Manage SIEM, IDS/IPS, EDR, and log monitoring systems.
• Perform threat detection and incident response activities. 

Infrastructure & Network Security

• Configure and maintain firewalls, VPNs, WAF, and network security controls.
• Harden Linux/Windows servers and virtualized environments.
• Implement security best practices for cloud and on-premise systems.
• Conduct regular security reviews for infrastructure and applications.

Vulnerability Management

• Perform vulnerability scanning and risk assessments.
• Coordinate remediation activities with infrastructure and development teams.
• Validate security patches and system updates.

Compliance & Governance

• Support compliance requirements such as ISO 27001, PCI-DSS, or internal security policies.
• Maintain security documentation, SOPs, and incident reports.
• Participate in security audits and assessments.

Collaboration

• Work closely with DevOps, Infrastructure, Network, and Development teams.
• Provide technical guidance on secure architecture and deployment.
• Conduct security awareness training when required.

• Competitive salary, negotiable based on competence
• Performance-based bonuses twice a year, depending on KPI and company business results
• In addition to 12 annual leave days as per labor law, additional paid summer leave based on seniority
• Health insurance for employees and family members
• Participation in company-organized team-building programs and annual community activities
• Working schedule: Monday – Friday, plus 2-3 Saturday mornings per month
• Opportunities to join internal training and development programs
• Full benefits including social insurance (SI), health insurance (HI), unemployment insurance (UI), annual health check-ups, and other benefits as per company policies and labor law regulations

Technical Skills

• Strong knowledge of network security concepts, TCP/IP, VPN, DNS, HTTP/HTTPS.
• Experience with Firewalls (Fortinet, Cisco, Palo Alto, etc.).
• Experience with Linux/Unix administration.
• Knowledge of SIEM platforms such as Graylog, Zabbix, Wazuh.
• Familiarity with vulnerability scanning tools (Nessus, OpenVAS, Qualys).
• Experience with IAM, MFA, SSO, and access control management.
• Understanding of OWASP Top 10 and web application security.
• Basic scripting skills (Bash, Python, PowerShell) are preferred.
• Knowledge of virtualization and cloud security is an advantage.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, or related field.
• 2+ years of experience in Cyber Security or System/Network Security.
• Security certifications are a plus:
  • CEH
  • Security+
  • CISSP
  • CCNA Security
  • Fortinet NSE
  • ISO 27001

Soft Skills

• Strong analytical and problem-solving skills.
• Good communication and teamwork abilities.
• Ability to work under pressure during incidents.
• High sense of responsibility and security awareness