DevSecOps Engineer

NSC Software delivers premier software development and consulting services for global businesses, powered by Vietnam’s top engineering talent. With a team of 200+ IT professionals, we continuously expand our capabilities, refine our delivery processes, and adopt cutting-edge technologies to meet diverse client needs.

Guided by our core values - Premier, Talented, Innovative, Committed, Trusted and Transparent - we focus on building long-term partnerships and delivering future-ready solutions. Through this, we aim to advance Vietnam’s IT industry and create meaningful global impact.

• Remote work, flexible working environment
• Attractive salary package
• Technical training and certifications
• Global career opportunities
• Enhance autonomy and independence

As a DevSecOps Engineer at NSC, you will have the opportunity to work remotely, with fixed working hours from 7AM to 4PM Vietnam time.

• Security operations and compliance Own security findings from audits, customer security reviews and compliance monitoring through to resolution and evidence, keeping us continuously audit-ready
• Monitor and respond to alerts from threat detection, vulnerability scanning, WAF and audit logging, and track incidents through to closure
• Security infrastructure Build and run security tooling as code: WAF rules, container and code scanning, and security logging and alerting that makes suspicious activity fully traceable
• Harden our multi-account AWS environment through TLS configuration, encryption, secrets management and least-privilege access
• Penetration testing and vulnerability remediation Run internal penetration tests and threat modelling across our applications, APIs and cloud, and manage third-party pentest engagements from scoping to report
• Drive remediation with engineering teams within agreed SLAs, and automate the vulnerability workflow from detection through to verified fix
• Access management Own access to internal systems (VPN, cloud accounts, databases, source control and AI tools), including joiner, mover and leaver processes and periodic access reviews
• Apply our AI governance policy when assessing new tools, connectors and integrations
• Developer experience and platform health Improve developer tooling, local environments, CI/CD and onboarding so the secure way to build is also the easiest
• Keep our shared platform healthy through patching, automated dependency updates, and library and runtime upgrades, working with engineers to resolve what breaks

• 3+ years in DevOps, platform engineering, SRE or security engineering, including at least 1 year in a security-focused role
• Deep hands-on AWS security experience: IAM and Identity Center, VPC, WAF, GuardDuty, Inspector, CloudTrail, KMS and Secrets Manager
• Terraform proficiency, plus containers (Docker, ECS or Kubernetes) and CI/CD platforms such as GitHub Actions or Buildkite
• Practical vulnerability management: CVE assessment, scanner triage, and safe patching and dependency upgrades
• Strong application security grounding (OWASP Top 10) and hands-on use of tools such as Burp Suite or OWASP ZAP
• The ability to engage auditors and engineers alike and influence teams to prioritise remediation, with AI tools as part of how you work every day

• Security certifications such as AWS Certified Security – Specialty or OSCP
• Experience supporting SOC 2, ISO 27001 or enterprise customer audits, ideally with Vanta or Drata
• Experience securing AI/LLM systems, including AWS Bedrock, guardrails and prompt injection mitigation
• Identity administration experience: SSO/SAML, Okta or Google Workspace

• Competitive salary (negotiable)
• Attractive Benefits: social insurance, private healthcare insurance, quarterly bonding, summer trip, company trip.
• Remote work arrangement, allowing for flexibility and comfort.
• Chance to enhance English language skills through interaction with native speakers.
• Opportunity to work within a professional and multicultural environment.