Đến nội dung chính
Tuyển Dụng
← Katalon

Product Security Engineer Cloud, DevSecOps

Katalon · Hồ Chí Minh
Ứng tuyển tại trang chính thức ↗
Loại hình
Toàn thời gian
Hình thức
Tại văn phòng
Cấp bậc
Nhân viên
Ngành nghề
Kỹ thuật / Cơ khí
Mức lương
Thương lượng
Địa điểm
Quận 10, Hồ Chí Minh, Hồ Chí Minh

Tổng quan

  • Your immediate ownership is cloud security and security operations—bringing our operational security to a place where it runs reliably, with strong detection coverage and clear playbooks.
  • As you build mastery in these areas, your scope will naturally expand into Application Security, DevSecOps, and AI Security—areas the team is actively investing in and where your contributions will have direct product impact.
  • The stronger you become on the operations side, the more opportunities you'll have to move toward higher-complexity security work. There is no artificial boundary between these responsibilities; this is one continuous role that evolves with you.
  • Maintain and strengthen cloud security configurations across AWS, Azure, and GCP environments.
  • Drive security hardening for Kubernetes, API gateways, databases, servers, and cloud workloads.
  • Monitor security alerts from SIEM, EDR, infrastructure logs, and SaaS platforms.
  • Investigate and respond to suspicious activities, phishing attempts, malware, and account compromise incidents from detection through resolution.
  • Perform log analysis to triage alerts and determine root causes.
  • Develop and continuously improve detection rules and incident response playbooks to increase coverage while reducing false positives.
  • Conduct vulnerability scanning and assessment across infrastructure, cloud workloads, containers, and third-party integrations.
  • Prioritize findings based on real-world exploitability and partner with DevOps and IT teams to drive remediation.
  • Monitor IAM permissions, SSO, MFA, and privileged access management.
  • Proactively enforce the principle of least privilege across cloud and SaaS environments.
  • Support audit evidence collection for ISO 27001, SOC 2, and ISO 42001.
  • Maintain clear documentation for incidents, vulnerabilities, and access reviews.
  • Communicate security risks effectively to both technical and non-technical stakeholders.
  • Perform secure code reviews, API security assessments, and threat modeling for new product features.
  • Integrate security tooling—including SAST, DAST, SCA, and secret scanning—into CI/CD pipelines alongside DevOps and engineering teams.
  • Participate in and progressively take ownership of penetration testing activities across the Katalon product suite.
  • Assess AI-specific security risks, including Prompt Injection, Insecure Output Handling, and Data Poisoning.
  • Help secure Katalon's AI Agents by applying best practices and frameworks such as the OWASP Top 10 for LLMs.

Yêu cầu

  • 3–5 years of hands-on experience in Security Operations, Cloud Security, or a related field.
  • Strong experience with enterprise SIEM/logging platforms and EDR solutions, with the ability to independently analyze logs, triage alerts, and build detections.
  • Practical knowledge of cloud security (AWS, Azure, or GCP), IAM, SSO, MFA, and server hardening.
  • Ability to write automation scripts using Python, Bash, PowerShell, or similar languages.
  • Strong documentation and communication skills, with experience collaborating across IT, DevOps, and engineering teams.
  • A genuine desire to grow into Application Security, Penetration Testing, and AI Security.
  • Nice to Have
  • Familiarity with AI Security concepts, LLM guardrails, and securing AI Agents.
  • Understanding of Secure SDLC, the OWASP Top 10, and web/API security fundamentals.
  • Experience with DevSecOps, CI/CD pipelines, and security tooling integration.
  • Hands-on exposure to Kubernetes or container security.
  • Experience supporting ISO 27001, SOC 2, or other compliance audits.
  • Certifications such as AWS Security Specialty, BTL1, CySA+, CEH, OSCP, or BSCP are considered a plus, but are not required.
  • You'll Thrive Here If You Can
  • Investigate a security alert independently and clearly explain what happened and why it matters.
  • Read and correlate logs from cloud, endpoint, server, and SaaS platforms without requiring step-by-step guidance.
  • Partner with engineering and DevOps teams to drive vulnerability remediation through completion—not just create tickets.
  • Review IAM configurations and proactively identify over-privileged access.
  • Demonstrate genuine curiosity about how systems are compromised—and how to build resilient systems that aren't.
  • Why You'll Love Working Here
  • At Katalon, we bring together self-starting, open-minded, and talented people while actively promoting a transparent and growth-enabling working environment. But don’t just take our word for it. Take a better look below!
  • Total Remuneration: Satisfying your financial goals through competitive compensation and periodic performance bonuses.
  • Well-being & Work-life Balance: Staying healthy through comprehensive health plans and generous paid leaves.
  • Statutory Compliance: Labor compliance with local regulations that ensure employee security.
  • Work Facilities & Accommodation: Top-notch equipment, supportive allowances, and A-class facilities.
  • Diversity, Equity, Engagement, & Inclusion: Becoming part of a global team that celebrates differences, equal opportunity, and meaningful employee recognition.
  • Growth & Rewards: Thriving professionally through employee enablement, a culture of trust, and rewarding performance.
  • Katalon is proud to be an equal-opportunity employer. We care about our people and celebrate our differences. We want to work with talented, collaborative, and innovative people. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical…

Quyền lợi

Chế độ thưởng

Tóm tắt thông tin từ tin tuyển dụng chính thức. Xem bản gốc ↗

Quan tâm đến vị trí này?

Bạn sẽ được chuyển đến trang ứng tuyển chính thức của nhà tuyển dụng.

Ứng tuyển tại trang chính thức ↗
Đây là doanh nghiệp của bạn? Nhận quản lý trang, yêu cầu chỉnh sửa hoặc gỡ bỏ
→