Kỹ sư an toàn thông tin cấp cao tại Techcombank

Tổng quan vị trí

Techcombank mô tả vị trí an toàn thông tin rộng, có thể thuộc kỹ thuật bảo mật, quản trị, kiểm thử tấn công hoặc giám sát. Ứng viên góp phần bảo vệ ứng dụng, hạ tầng và duy trì tuân thủ.

Trách nhiệm

• Đánh giá dự án công nghệ mới qua yêu cầu an ninh, rà soát thiết kế, mô hình hóa mối đe dọa, rà soát mã và kiểm thử.
• Nghiên cứu, triển khai phòng vệ, phối hợp ứng phó sự cố và giám sát sự kiện đáng ngờ hoặc cấu hình vi phạm.
• Duy trì chuẩn và kiểm tra an ninh theo quy định ngân hàng và các khung như PCI DSS, ISO, SWIFT CSP.
• Tùy phân công, kiểm thử lỗ hổng, quản trị quyền truy cập, mạng, thiết bị đầu cuối, dữ liệu và hướng dẫn khắc phục.

Yêu cầu

• Có đào tạo đại học phù hợp về CNTT hoặc ngành liên quan và kinh nghiệm đáng kể về an toàn thông tin trong tài chính, dịch vụ hay viễn thông.
• Có thực hành kiểm thử an ninh hoặc vận hành kiểm soát như PAM/IAM, tường lửa, bảo vệ thiết bị đầu cuối và DLP.
• Biết đánh giá an ninh ứng dụng, hạ tầng, phối hợp nhóm tuân thủ và điều tra điểm yếu.
• Tin chính thức liệt kê chứng chỉ bảo mật của nhà cung cấp hoặc kiểm thử tấn công là lợi thế.

Công nghệ trong công việc

• React: IS Monitoring: Monitor detecting all attack events/incidents as quickly as possible (realtime) based on events aggregated from security systems as well as other technology components.Then alert relevant departments to investigate and react to that .
• Swift: Maintain security standards and checks aligned with bank rules and frameworks such as PCI DSS, ISO and SWIFT .
• C: Listed by the employer as part of the role’s technical requirements.
• CAN: From there, provide CISO as well as other Information Security departments to have programs to deal with the problems of system weaknesses that can be .
• OWASP: + Develop penetration testing methods, information security scanning scripts and security checks according to international standards such as OSSTMM, Sans and .

Hướng dẫn đánh giá mức độ phù hợp (tiếng Anh)

Phân tích dựa trên yêu cầu và trách nhiệm trong tin tuyển dụng của nhà tuyển dụng.

Understanding the scope. This Senior Officer, Information Security (40001098) position at Techcombank is best assessed through the work described in the employer’s posting, rather than the title alone. The available role overview says: “Techcombank describes a broad security role that may cover security engineering, administration, red-team testing or monitoring. The successful candidate helps protect applications and infrastructure and maintain…” Read that statement together with the responsibilities below to understand the likely balance between delivery, coordination and technical decision-making. The role belongs to the security area, but that label is only a guide to the work; the employer’s own requirements remain decisive. Before applying, check the original listing for reporting lines, product or team assignment, employment terms and any details that may have changed since this copy was checked. Where this page says a fact is not specified, treat it as an open question rather than an implied promise.

What the responsibilities signal. The posting specifically names “Assess new technology projects through security requirements, design reviews, threat modeling, code review and testing.”; “Research and deploy defenses, coordinate incident response and monitor for suspicious events or configuration violations.”; “Maintain security standards and checks aligned with bank rules and frameworks such as PCI DSS, ISO and SWIFT CSP.”. For each duty, identify a project where you performed comparable work and be ready to describe the context, your own contribution, constraints, decisions, and measurable result. Explain how you moved from the initial need to implementation, review, release or operational follow-through, where those stages apply. If the work involved other teams or users, distinguish your decisions from the group’s contribution. Avoid presenting a technology keyword as proof by itself: connect it to the problem you solved, the scale or complexity involved, and what changed after your work. The source may contain additional duties; review it directly before preparing your application.

How to read the requirements. The listed qualifications include “Relevant university education in IT or a related field and substantial information-security experience in finance, services or telecommunications.”; “Practical experience with security testing or operating controls such as PAM/IAM, network firewalls, endpoint tools and DLP.”; “Ability to assess application and infrastructure security, work with compliance teams and investigate weaknesses.”. Mark each requirement as demonstrated, adjacent experience or a genuine gap, then use a concise example for the first two categories. A strong example explains what you personally owned, how you made trade-offs, how you validated the result and what you learned. If the posting specifies years of experience, language ability, certifications, location or eligibility, address those facts plainly in your CV or application rather than relying on the employer to infer them. Do not claim a qualification from exposure alone. For a requirement you do not meet, describe relevant transferable experience accurately and ask the recruiter whether it is mandatory.

Technology and working evidence. The technology terms associated with this listing are React. Treat this as a set of posting-derived signals, not a guarantee that every tool is used daily or that the list is complete. For each term relevant to your experience, prepare one concrete example: the system or workflow, the part you owned, the alternatives considered, and how you tested reliability, security, performance or usability as appropriate. If you have not used a named tool, explain the closest related system you have worked with and how you.

Về Techcombank

Nguồn là trang tuyển dụng riêng của Techcombank. Tin không nêu hình thức làm việc hay quyền lợi riêng.

Việc làm liên quan

• Kỹ sư xây dựng sản phẩm AI — Money Forward Vietnam
• Lập trình viên full-stack cấp cao (React, Node.js) — GRADION
• Kỹ sư full-stack cấp cao, trọng tâm frontend (Next.js/Node.js/AWS) — GRADION
• Kỹ sư full-stack cấp cao / trưởng nhóm (Node.js, React/Vue) — GRADION
• Kỹ sư full-stack cấp cao / trưởng nhóm (PHP, Vue/React) — GRADION
• Kỹ sư phần mềm cấp cao tại Voltus — Voltus