System Security Engineer (Senior)

Identity & Access Management (IAM)

- Monitor and investigate credential exposure involving corporate accounts (Google Workspace, Microsoft 365, VPN, Slack, etc.).

- Administer Identity and Access Management (IAM) based on the Principle of Least Privilege.

- Ensure timely provisioning and deprovisioning of user accounts, especially during employee onboarding and offboarding.

Enterprise Security Operations

- Deploy and maintain enterprise endpoint protection solutions (EDR/Antivirus).

- Implement and administer enterprise password management platforms (1Password, Bitwarden Enterprise, etc.).

- Configure and maintain Firewalls, VPN, Wi-Fi security, and network segmentation (VLAN).

Security Monitoring & Incident Response

- Analyze security logs from cloud platforms, servers, and network infrastructure to detect suspicious activities and unauthorized access.

- Participate in incident response activities involving phishing, ransomware, malware, or internal data leakage.

- Support incident recovery and post-incident remediation.

Security Awareness & Compliance

- Deliver security awareness training for employees.

- Collaborate with Security Compliance teams to implement and monitor internal security policies and regulatory requirements.

Core Qualifications (Must-Have)- Experience: 4+ years of experience in Information Security, IT Security, or System Administration.- Identity & Access Management: Hands-on experience managing IAM, Active Directory, Google Workspace, Microsoft 365, or similar enterprise identity platforms.- Endpoint & Infrastructure Security: Experience deploying and administering endpoint protection (EDR/Antivirus), firewalls, VPNs, and enterprise network security solutions.- Security Operations: Experience monitoring security events, investigating security incidents, and performing incident response activities.- Security Fundamentals: Solid understanding of network security, access control, authentication, vulnerability management, and security best practices.

Preferred Qualifications (Nice-to-Have)- Security certifications such as Security+, CEH, CISSP, or equivalent.- Experience with SIEM platforms (Microsoft Sentinel, Splunk, QRadar, etc.).- Familiarity with cloud security (Microsoft Azure, AWS, or Google Cloud).- Knowledge of security frameworks such as ISO 27001, CIS Controls, or NIST Cybersecurity Framework.

Soft Skills- Strong analytical and problem-solving skills with a proactive security mindset.- Good communication skills and ability to collaborate with cross-functional teams.- Ability to prioritize and respond effectively during security incidents.

BENEFITS- Well trained and dedicated to being able to catch the pace smoothly- Attracted salary based on the ability of the candidate and the general salary framework set by the company.- Annual salary review- 13th-month salary and bonus for holidays- Team building once a month- Company trip: 1 time/year- PVI Healthcare Insurance- Full social benefits in accordance with the company and the law of Vietnam- Professional environment and clear procedures.- Great opportunity to improve English- Opportunity to learn Logistics and professional management system of project development process

Thưởng

- Annual salary review

- 13th-month salary and bonus for holidays

- Full social benefits in accordance with the company and the law of Vietnam

- PVI healthcare insurance

Cơ hội du lịch

- Company trip 1 time/year