OL Vietnam

Tóm tắt công việc

Job Summary:  The DevSecOps Engineer is responsible for embedding security at every stage of the software development lifecycle (SDLC) - from initial design and development to deployment and operations. This role introduces processes, tools, and methodologies that prioritize secure coding practices, infrastructure hardening, automated compliance, and proactive threat detection, while supporting scalability and continuous delivery in cloud-native environments.

Essential Functions:

• Infrastructure Design & Automation: Design, implement, and maintain secure infrastructure using Infrastructure as Code (IaC) tools (e.g., Terraform, CloudFormation) with a focus on compliance, cost efficiency, and security
• Security Integration: Develop and enforce security controls within CI/CD pipelines, integrating automated scanning tools (e.g., SAST, DAST, SCA) to detect vulnerabilities and ensure secure deployments
• Cloud Management: Architect and manage secure cloud environments (AWS, Azure, GCP), including containerized workloads with hardened images and Kubernetes security policies
• Monitoring & Incident Response: Implement and manage logging, monitoring, and alerting solutions (e.g., SIEM tools, Prometheus, Grafana) for threat detection and incident response
• Collaboration & Culture: Promote secure development practices, train teams on emerging security methodologies, and collaborate with stakeholders to ensure security by design
• Cost Management: Monitor and optimize cloud costs while maintaining security compliance

You would love to work and find those values with us:

• Distributed decision making: We also allow each employee to directly weigh in on our priorities.
• Transparency: We value transparency, openness, and accountability, whether it is with our customers or internally. 
• Meritocracy: Employee's recognition and advancement is based purely on their individual and collective achievements.
• Deep work: We do everything we can to let you focus deeply on your work.

Our benefits include:

• Attractive salary package and 100% Gross Salary in probation period.
• 13th-month salary. 
• 18 days of annual leaves (cashback allowed if not used) plus 4 days for a company trip.
• Multiple allowances (Lunch, Gym, Parking, Birthday/Tet/Wedding voucher... ).
• Full social, health, and unemployment insurance.
• Premium healthcare insurance for you and coverage for 1 extra family member.
• Regular team-building activities (Bowling, Go-Kart, Glamping)  and special celebrations on Autumn Festival, Halloween, Christmas, Tet,etc.

Working mode: In-person at the offices.

• HCMC Office: Tòa nhà Saigon Trade Center (37 Tôn Đức Thắng, P. Sài Gòn).
• Hanoi Office: Tòa nhà 14 Láng Hạ (14 P. Láng Hạ, Thành Công, Ba Đình).
• Jakarta Office: Sahid Sudirman Centre, 56th Floor, Jl. Jenderal Sudirman No.86, Jakarta Pusat, Indonesia.

The most successful candidates for this role will have:

• Technical Proficiency: Expertise in IaC tools (Terraform, CloudFormation), container security (Docker, Kubernetes), and cloud platforms (AWS, Azure, GCP)
• Security Best Practices: Strong knowledge of security frameworks (OWASP, NIST, CIS) and secure development principles
• Automation & Scripting: Skilled in scripting languages (Bash, Python, PowerShell) for automation and system integration
• System Administration: Solid experience with Linux/Windows hardening and configuration management tools (Ansible, Chef, Puppet)
• Communication & Collaboration: Excellent communication skills to promote security best practices and collaborate across teams

Nice to have:

• Familiarity with the .NET platform and secure coding practices

AI Fluency:

• This role operates in an AI-augmented environment
• We expect fluency in using AI tools to accelerate your own work, and the judgment to critically evaluate and correct AI output rather than take it at face value