FPT Software ★ 3.8

I. JOB OBJECTIVE

Ensure comprehensive information security for FPT Group’s IT systems, data, and intellectual property. Lead the research, design, implementation, operation, and optimization of advanced cybersecurity solutions. Proactively prevent, detect, analyze, and respond to sophisticated cyber threats while ensuring compliance with legal regulations and international information security standards.

II. KEY RESPONSIBILITIES

1. Security Policy & Architecture Development (25%)

• Lead the research, proposal, development, and continuous update of group-level information security policies, procedures, and standards.
• Design and review security architectures for new or upgraded systems/projects, ensuring Security by Design principles.
• Ensure compliance with local regulations (Decree 53, Cybersecurity Law, etc.) and international standards (ISO 27001, PCI DSS, GDPR, NIST, etc.).

2. Security Operations, Monitoring & Optimization (30%)

• Deploy, configure, manage, and optimize advanced security solutions (NGFW, WAF, DLP, PAM, EDR/XDR, SIEM/SOAR, Cloud Security).
• Conduct in-depth monitoring, log analysis, and alert investigation to proactively detect APTs and sophisticated threats.
• Manage patching, system upgrades, and performance optimization for security platforms.
• Develop SIEM/SOAR rules and use cases to enhance monitoring efficiency and automate incident response.

3. Incident Response (IR) & Advanced Investigation (20%)

• Develop and maintain a Group-level Incident Response Plan (IR Plan).
• Lead investigations and remediation of large-scale, high-severity security incidents (APT, ransomware, data breaches).
• Perform threat tracing, malware analysis, and digital forensic investigations.
• Produce detailed incident reports, root cause analyses, and strategic improvement recommendations.

4. Security Assessment, Testing & Advanced Vulnerability Management (15%)

• Lead or coordinate vulnerability scanning, penetration testing, red teaming, and application security assessments (SAST/DAST).
• Analyze risks, recommend remediation plans, and track vulnerability resolution.
• Conduct security hardening and configuration assessments.

5. Research, Development & Security Capability Enhancement (10%)

• Continuously research emerging attack trends, zero-day vulnerabilities, and advanced security technologies (AI/ML in security, blockchain security).
• Propose, pilot (PoC), and evaluate innovative security solutions.
• Design and deliver advanced information security training and knowledge-sharing programs for Group employees.

III. JOB REQUIREMENTS

Education

- Bachelor’s degree or higher in Information Technology, Information Security, or related fields.

Experience

- Minimum 5–7 years of advanced experience in information security within large corporations or cybersecurity companies.

- Deep expertise in at least 2–3 areas:

• Security Operations (SOC/SIEM/SOAR)
• Cloud Security (AWS/Azure/GCP)
• Application Security (SAST/DAST/PenTest)
• Infrastructure Security
• Data Security
• IAM/PAM
• Threat Hunting & Forensics

- Proven experience leading or actively participating in large-scale security projects or incident response activities.

- Experience in DevSecOps, Security Automation, or programming (Python) is a strong advantage.

Technical Knowledge

- Strong mastery of information security principles, protocols, architectures, and best practices.

- In-depth understanding of sophisticated cyberattacks and defense/detection/response techniques.

- Advanced knowledge of networking, operating systems (Windows Server, Linux), virtualization, and containers.

- Hands-on experience with leading security technologies (NGFW, WAF, SIEM/SOAR, EDR/XDR, DLP, PAM, IAM/SSO, vulnerability scanners).

- Strong expertise in Cloud Security (AWS, Azure, GCP).

- Solid understanding of international and Vietnamese information security standards and regulations (ISO 27001, PCI DSS, GDPR, NIST, etc.).

Skills

- Excellent analytical, investigative, and problem-solving skills.

- Strong technical leadership and advisory capabilities.

- Ability to work independently under high pressure and collaborate effectively in teams.

- Outstanding communication, presentation, negotiation, and persuasion skills (Vietnamese & English).

- Strategic mindset, proactive attitude, creativity, and high sense of responsibility.

Certifications (Highly Preferred)

- High-value international security certifications such as: CISSP, CISM, CEH, OSCP, GCIH, CCSP, AZ-500, AWS Certified Security, Offensive Security certifications.