Kỹ năng


Mô tả công việc

Threat Modelling
Lead threat modelling sessions with development and business teams
Apply methodologies such as STRIDE and PASTA
Document threats, risks, and mitigation plans
Secure Design
Provide security input during application and API design reviews
Define and promote reusable secure design patterns
Support developers in integrating security controls early
Collaboration & Enablement
Work with Agile teams to embed security requirements
Deliver training/workshops on secure design and threat awareness
Communicate security risks clearly to both technical and business stakeholders
Governance & Compliance
Ensure threat modelling aligns with SSDLC checkpoints
Support audits and compliance documentation
Contribute to improving Application Lifecycle Management and Technology Standards policies.

Yêu cầu công việc

Bachelor’s degree in IT, Computer Science, or related field
4+ years of experience in application security or secure architecture
Hands-on experience with threat modelling (STRIDE, PASTA, etc.)
Strong knowledge of OWASP Top 10 and modern application architectures (APIs, microservices, cloud)
Excellent communication and facilitation skills
NICE TO HAVE:
Experience in DevSecOps environments
Knowledge of cloud security (Azure/AWS/GCP)
Security certifications (CISSP, CSSLP, etc.)

Thời gian làm việc

Trong tuần: Từ thứ 2 - thứ 6


Quyền lợi ứng viên

- Opportunities to onsite and work with big customers, advanced technology, personal development...
- Opportunity to work in groups with many leading experts in the field of domestic and international IT.
- Opportunity to implement ambitious projects in many countries, gain exposure to the latest technologies and learn from talented colleagues.
- Work in a youthful, vibrant, modern and multicultural environment. Communication activities and events on holidays take place regularly.
- Promotion opportunities based on capacity with corresponding rank increases and salary increases.
- Have the right to participate in soft skills training courses (logical thinking, creative thinking, communication skills, project management skills, negotiation skills...) and Japanese language classes.
- And many other attractive benefits...

Địa chỉ làm việc

Onsite Phú Nhuận, HCM

Tiền thưởng

Đăng nhập để xem

Mức lương

25-45 triệu

Thông tin

  • Kinh nghiệm 4 năm
  • Trình độ Không yêu cầu
  • Vị trí Senior
  • Hình thức Onsite
  • Hạn nộp hồ sơ 2026-12-31
  • Số lượng 1 người
  • Phỏng vấn 2 vòng
  • Ngôn ngữ Tiếng Anh cơ bản
Hỗ trợ ứng tuyển
Hr Admin

Hr

Báo cáo lỗi

Sao chép đường dẫn để chia sẻ:


Việc làm cùng kỹ năng

IT 보안 (한국어 가능)

  • 1-1 triệu
  • Seoul
Devwork 베트남 빌드 센터에서 함께할 한국어 능통한 IT 보안 엔지니어를 찾고 있습니다. 해당 후보자는 IT 인프라, 애플리케이션 및 네트워크 보안을 책임지며, 글로벌 보안 팀과 협력하여 보안 정책 및 리스크 관리 전략을 실행하는 역할을 맡게 됩니다. 주요 업무: IT 보안 정책, 프레임워크 및 베스트 프랙티스를 구현하고 모니터링 보안 위협, 취약점 및 사고를 식별, 분석 및 완화 내부 및 외부 규정을 준수하기 위해 보안 평가 및 감사를 수행 한국 및 글로벌 보안 팀과 협력하여 보안 작업을 원활하게 실행 조직의 보안 상태를 향상시키기 위한 직원 보안 인식 교육 지원 사고 대응, 포렌식 분석 및 보안 침해 복구 지원 SIEM(보안 정보 및 이벤트 관리) 도구 및 기타 보안 모니터링 솔루션 유지 관리 및 개선 새로운 IT 프로젝트에 대한 보안 추천을 제공하고 시스템 설계에 보안이 통합되도록 보장

Tiền thưởng

Đăng nhập để xem

Infrastructure Cloud Solution Architect (On-site)

  • Dưới 7 triệu
  • Tất cả địa điểm
Location: Austin Texas ● Plan and engineer the organization's cloud computing infrastructure and applications. Implements and designs infrastructure and software. ● Ensure HHSC best practices and methodologies are applied to the design, deployment, and operations in the cloud. ● Define and develop blueprints and roadmaps for building solutions in the cloud (preferably AWS) ● Develop a roadmap for cloud monitoring, implementation, and strategy ● Ensure compliance with enterprise security configuration standards ● Work closely with other teams to ensure solutions are engineered and deployed meet business objectives and regulatory requirements. ● Provide cloud operational guidance both internal and external operation teams ● Investigate and provide feedback on new AWS services and solutions. ● Performing continuous research on emerging technologies to stay updated with the best alternatives, investigate and provide feedback on new services and solutions offered by the CSP ● Providing technical oversight, review, and quality control throughout the life cycle of the implementations ● Engaging with Cloud service providers around solving technical problems in the Cloud ecosystem ● Support DevOps functions to best utilize cloud resources with software configuration management and continuous integration tools. ● The Cloud Solution Architect will perform other duties as assigned.

Tiền thưởng

Đăng nhập để xem

Tiền thưởng

Đăng nhập để xem