Security Engineer

• Investigate performance issues in our VPN/proxy data collection systems — low IP collection rates, coverage gaps, and recurring failures across proxy, residential-proxy, browser-extension, and smart-DNS based collectors (PHP-based).
• Diagnose root causes of degradation and identify what else we can do to improve collection rate, freshness, and coverage.
• Fix common failures following established procedures, and propose enhancements to avoid repeat failures.
• Build new collectors for VPN/proxy providers following existing templates, and enable auto-updater tooling for new providers.
• Support the config auto-updater (JS-based): fix recurring updater failures, handle CAPTCHA-related issues (Cloudflare, reCAPTCHA v3), and manually update configs when auto-updaters fail.
• Run VPN testing across a set of VPN applications and research current VPN technology to understand how it behaves and evolves.
• Apply AI tools to research VPN providers — identify their spoofing techniques and the corresponding detection and protection methods GeoGuard can use against them.
• Explore and propose what else we can do to detect VPN users — new signals, heuristics, or techniques that improve detection coverage.
• Query performance and detection data to identify anomalies and establish healthy baselines and alert thresholds.
• Build automated, data-driven monitoring — from raw data, to anomaly/alert-detection logic, to a visual dashboard the team can use on an ongoing basis — so degradation is caught proactively rather than after the fact.
• Document testing results, recurring failure patterns, and research findings to drive process improvement.

Security Software Engineer Intern

• Support delivery of data privacy and cybersecurity assessments, compliance reviews, and risk assessments.
• Assist in identifying, assessing, and mitigating privacy and cybersecurity risks.
• Review policies, procedures, controls, and related documentation against regulatory and industry requirements.
• Contribute to advisory projects involving governance frameworks, compliance programs, operating models, and implementation roadmaps.
• Actively support other team members and deliver work surpassing client’ expectations.
• Conduct research on emerging privacy, cybersecurity standards, and regulatory developments.

Intern, Cybersecurity & Privacy Services – Data privacy focus

• Ensure respective policy, standards, processes and controls meet regulator and compliance expectations
• Support meeting departmental budgets
• Ensure controls and timely completion of findings and treatment plans
• Ensure and drive security outcomes relating to software development and devops practices
• Ensure and optimize dynamic application security testing tools and API security solutions
• Ensure tools are configured correctly and operating efficiently to provide maximum protection
• Utilize a variety of testing methodologies and tools to uncover potential threats and risks while eliminating the false positives
• Enhance and update application dynamic testing methodologies, processes and standards documentation
• Document and evangelize secure API design patterns
• Build and promote code libraries for API security
• Automate continuous security testing of APIs
• Consult with development teams to educate and improve awareness of secure standards and practices
• Support and champion the development of secure and reusable code across development teams to eliminate gaps identified in dynamic and API security testing
• Develop or use tooling to identify security vulnerabilities within our web application footprint
• Produce clear and accurate reporting for stakeholders
• Work with Cyber Engineering & Platforms teams to expand coverage and integrate dynamic and API security testing
• Work with Detection & Response and other Cyber Security teams to ensure critical exposures are mitigated in a timely manner
• Extend support on remediation of dynamic application testing and API vulnerabilities discovered through scanning and security testing
• Help manage the organization's vulnerability intake and remediation process
• Support incident response efforts as required
• Stay abreast of current and emerging technologies, threats and vulnerabilities, and best practice protection methods
• Research and analyze application behaviors to improve security and stability
• Contribute to the evolution of the organization's application security functions and services
• Other activities as required by management

Associate, DAST & API Security Posture

• Consult and help the business, project and technical practitioners avoid missing critical security concerns
• Influence senior management and project leaders, in order to update the solution requirements to reflect the need for security
• Analyse the non-normative flows through systems, applications and proposed solutions to identify risks, security threats and vulnerabilities in order to identify required security control components and countermeasures
• Deliver the conceptual and logical security design abstractions to form the Security Architecture for solutions
• Consider the business drivers for security and outline controls related to domains such as Identity and Access, Data and Media Protection, Security Information and Event Management, Communications, Configurations, and Vulnerability Management
• Manage significant architectural decisions with senior management, sponsors and projects to ensure secure outcomes and appropriate governance practices are adhered to
• Proactively manage risk and assurance requirements when developing designs that change risk posture within agreed Risk Appetite and ensure compliance
• Coach and mentor others in the practical application of security and risk management concepts, principles and strategies, and relevant industry standards

Security Engineer jobs in Vietnam

See all jobs on JobTailor

Security Software Engineer Intern

Intern, Cybersecurity & Privacy Services – Data privacy focus

Associate, DAST & API Security Posture

Security Architect