Techcombank
Techcom Life – A Proud Member of Techcombank Ecosystem
As part of Techcombank’s integrated financial ecosystem, Techcom Life is built on a strong foundation of Health and Wealth, with a mission to empower individuals to live life to the fullest. We accompany each customer on their journey to achieve their aspirations, delivering holistic financial and well-being solutions that create lasting value.
Guided by the belief that true growth comes from the harmony of strength, security, and balance, Techcom Life brings together innovation, expertise, and care to help life grow bigger every day.
JOB PURPOSE
The Expert, DevSecOps is a senior technical leader responsible for designing, implementing, and optimizing the organization’s DevSecOps ecosystem. This role bridges development, operations, and security teams to ensure seamless integration of security throughout the software development lifecycle (SDLC). The expert drives automation, process improvement, and technical excellence across platforms and teams
KEY ACCOUNTABILITIES
1. DevSecOps Factory Design & Optimization
- Architect and enhance CI/CD pipelines with a focus on security, scalability, and performance
- Optimize key delivery metrics: Lead time, Deployment frequency, MTTR, Change failure rate
- Integrate automated security testing tools: SAST (Static Application Security Testing); DAST (Dynamic Application Security Testing); IAST, RASP, API Security Scanners
- Automate end-to-end testing and validation across staging and production environments
- Coordinate continuous deployment of services and platforms with minimal risk
2. Security Governance & Monitoring
- Establish continuous security monitoring for applications and platforms
- Conduct penetration testing, fuzzing, and threat modeling
- Integrate security tools into the DevSecOps toolchain: SonarQube, Checkmarx, Fortify, OWASP ZAP, Burp Suite; HashiCorp Vault, Aqua Security, Prisma Cloud, Snyk
- Collaborate with operations teams to respond to security incidents and perform root cause analysis
3. Compliance & Process Optimization
- Implement automated business value verification and defect detection
- Build dynamic, customizable dashboards for security reporting and stakeholder visibility
- Ensure compliance with internal policies and international standards: OWASP Top 10, ISO 27001, NIST, PCI-DSS, GDPR
- Support internal audits and external security assessments
4. Collaboration & Enablement
- Work closely with development, QA, and operations teams to embed security practices
- Mentor team members on DevSecOps principles, tools, and workflows
- Promote a culture of “Security by Design,” “Shift Left,” and “Security as Code”
- Recommend process improvements and foster cross-functional collaboration
WHY BECOME IT/DATA EXPERTS AT TECHCOMBANK?
Qualifications
- Graduated from university majoring in Computer Science/Engineering, Software Engineering or Information Technology.
Work Experience
- At least 5- 8 years of relevant experience in software development and minimum 3 years of experience in DevSecOps setup.
- Expert knowledge of DevSecOps factory pipeline components and DevSecOps Metrics.
- Expert knowledge and working experience with public and hybrid cloud environments.
- Hands-on experience on code, commit, code review, document, test, integrate, QA, monitor with frontend and backend languages and technologies.
- Expert knowledge and working experience with DevSecOps tools Chain and security governance.
- Expert knowledge and working experience with Infrastructure as Code and Configuration management.
Foreign language
- English, according to TCB's regulations in each period.
English
Nói: Intermediate - Đọc: Intermediate - Viết: Intermediate
MISSION:
• To be the preferred and most trusted financial partner of our customers, providing them with a full range of financial products and services through a personalized/customer centric relationship.
• To provide our employees with a great working environment where they have multiple opportunities to develop, contribute and build a successful career
• To offer our shareholders superior long term returns by executing a fast growth strategy while enforcing rigorous corporate governance and risk management best practices
CORE VALUES:
1. Customer first: what we do is only valued if it is truly beneficial to our customers and colleagues.
2. Innovation: Make improvements to lead the way.
3. Team work: At Techcombank, you will not have good performance without cooperation.
4. People development: People with proven capability will bring the organization competitive advantages and remarkable successes.
5. Accountability: Be committed to overcoming difficulties and achieving great successes.
