{"id":3861194,"url":"https://alion.io/job/acb-it-devsecops-specialist","title":"IT - DevSecOps Specialist","company":{"id":2715725,"name":"ACB","domain":"acb.com.vn","url":"https://alion.io/company/acb-com-vn","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Base","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Vietnam"],"countries":["VN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"Ansible","optional":false},{"name":"Aqua Security","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"Bitbucket","optional":false},{"name":"Checkmarx","optional":false},{"name":"CI/CD","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"CloudFormation","optional":false},{"name":"Docker","optional":false},{"name":"Fortify","optional":false},{"name":"GCP","optional":false},{"name":"Git","optional":false},{"name":"GitHub","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitLab","optional":false},{"name":"GitLab CI","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Jenkins","optional":false},{"name":"Kubernetes","optional":false},{"name":"Nessus","optional":false},{"name":"OpenShift","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"PCI DSS","optional":false},{"name":"PowerShell","optional":false},{"name":"Prisma Cloud","optional":false},{"name":"Python","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"Shift-Left Security","optional":false},{"name":"Snyk","optional":false},{"name":"SOC 2","optional":false},{"name":"SonarQube","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Veracode","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-11-05T17:00:00Z","employer_posted_date":"2026-11-06","last_verified_at":"2026-11-07T03:45:54Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"DevSecOps Specialist is responsible for integrating security practices into the Software Development Life Cycle (SDLC), CI/CD pipelines, cloud infrastructure, and operational processes. This role ensures that security is embedded throughout the development lifecycle while enabling agile delivery and maintaining compliance with organizational and regulatory requirements.\nThe position collaborates closely with Development, Infrastructure, Cloud Engineering, Quality Assurance, Architecture, and Information Security teams to build secure, scalable, and resilient systems.\nResponsibilities\nDevSecOps Integration\nDesign and implement DevSecOps practices across application development and infrastructure deployment processes.\nEmbed security controls throughout the SDLC.\nAutomate security testing and validation within CI/CD pipelines.\nEstablish secure coding, security-by-design, and shift-left security practices.\nCI/CD Security\nBuild and maintain secure CI/CD pipelines using:\nJenkins\nGitLab CI/CD\nGitHub Actions\nAzure DevOps\n\nIntegrate security scanning tools including:\nSAST (Static Application Security Testing)\nDAST (Dynamic Application Security Testing)\nSCA (Software Composition Analysis)\nIaC Security Scanning\n\nCloud & Infrastructure Security\nImplement and maintain security controls across cloud platforms:\nAWS\nMicrosoft Azure\nGoogle Cloud Platform (GCP)\n\nSecure containerized environments:\nDocker\nKubernetes\nOpenShift\n\nEnforce infrastructure security through Infrastructure as Code (IaC):\nTerraform\nCloudFormation\nAnsible\n\nSecurity Automation\nAutomate vulnerability assessment and remediation processes.\n\nDevelop scripts and automation solutions using:\nPython\nBash\nPowerShell\n\nImplement policy-as-code and compliance-as-code frameworks.\n\nVulnerability Management\nConduct security assessments and vulnerability reviews.\n\nAnalyze findings from:\nCheckmarx\nVeracode\nSonarQube\nSnyk\nFortify\nPrisma Cloud\nAqua Security\n\nCoordinate remediation activities with engineering teams.\n\nMonitoring & Incident Response\nSupport security monitoring and logging initiatives.\nIntegrate security alerts into operational workflows.\nParticipate in security incident investigations and post-incident reviews.\nImprove detection and response capabilities.\nCompliance & Governance\nSupport compliance initiatives related to:\nISO 27001\nPCI DSS\nNIST Cybersecurity Framework\nCIS Benchmarks\nOWASP Top 10\nSOC 2\n\nEnsure systems comply with organizational security policies and regulatory requirements.\n\nSecurity Awareness\nPromote secure development practices among engineering teams.\nConduct threat modeling and secure code review workshops.\nProvide technical guidance on security best practices.\nQualifications\nEducation\nBachelor‘s degree in:Information Technology\nComputer Science\nCybersecurity\nSoftware Engineering\nRelated disciplines\n\nAt least 5+ years of experience in DevSecOps, Cloud Security, or Security Engineering.\nTechnical Skills\nDevOps Tools\nGit\nGitHub\nGitLab\nBitbucket\nJenkins\nAzure DevOps\nCloud Platforms\nAWS\nAzure\nGCP\nContainer & Orchestration\nDocker\nKubernetes\nOpenShift\nSecurity Tools\nSonarQube\nCheckmarx\nVeracode\nSnyk\nFortify\nPrisma Cloud\nAqua Security\nQualys\nNessus\nInfrastructure as Code\nTerraform\nCloudFormation\nAnsible\nProgramming/Scripting\nPython\nBash\nPowerShell\nYAML\nSecurity Knowledge\nSecure SDLC\nThreat Modeling\nSecure Coding Practices\nZero Trust Architecture\nIdentity and Access Management (IAM)\nSecrets Management\nVulnerability Management\nPreferred Certifications\nSecurity Certifications\nCISSP\nCISM\nCEH\nCompTIA Security+\nCloud Security Certifications\nAWS Certified Security Specialty\nMicrosoft Azure Security Engineer Associate (AZ-500)\nGoogle Professional Cloud Security Engineer\nDevSecOps Certifications\nPractical DevSecOps Professional (PDSP)\nCertified DevSecOps Professional (CDP)\nKubernetes Certifications\nCertified Kubernetes Security Specialist (CKS)\nCertified Kubernetes Administrator (CKA)","description_format":"text","description_chars":3906,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Commercial & Retail Banks"],"lifecycle":[{"event":"open","at":"2026-11-06T09:34:04Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":6,"reasons":["conf:0","win:early"],"computed_at":"2026-11-07T04:35:13Z"},"pay":null,"html_url":"https://alion.io/job/acb-it-devsecops-specialist","json_url":"https://alion.io/job/acb-it-devsecops-specialist.json","meta":{"generated_at":"2026-11-07T04:35:13Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11187,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2715725},"rest":"https://alion.io/mcp/rest/get_company?id=2715725"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Facb-it-devsecops-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Facb-it-devsecops-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Facb-it-devsecops-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/acb-it-devsecops-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Facb-it-devsecops-specialist"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3861194}},{"tool":"search_jobs","arguments":{"company":"acb.com.vn","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3861194},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}