{"id":1323630,"url":"https://alion.io/job/concung-com-secops-engineer","title":"SecOps Engineer","company":{"id":2799157,"name":"Concung.com","domain":"concung.com","url":"https://alion.io/company/concung","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Ho Chi Minh City, Vietnam"],"countries":["VN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":36000,"max_usd":95000,"period":"year","method":null,"sample_n":2443},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Ansible","optional":false},{"name":"ArgoCD","optional":false},{"name":"Azure","optional":false},{"name":"Bash","optional":false},{"name":"GitOps","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Keycloak","optional":false},{"name":"Kubernetes","optional":false},{"name":"Kyverno","optional":false},{"name":"Linux","optional":false},{"name":"Okta","optional":false},{"name":"Platform Engineering","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false},{"name":"SIEM","optional":false},{"name":"Terraform","optional":false},{"name":"VPN","optional":false},{"name":"Zero Trust","optional":false},{"name":"CIS Benchmarks","optional":true},{"name":"Graylog","optional":true},{"name":"MITRE ATT&CK","optional":true},{"name":"NIST CSF","optional":true},{"name":"Splunk","optional":true},{"name":"Wazuh","optional":true}],"status":"live","first_seen_at":"2026-09-22T20:02:51Z","employer_posted_date":null,"last_verified_at":"2026-09-22T20:02:51Z","board_verified":false,"closed_at":null,"days_open":5,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":5},"description":"Job Summary\nThe company is seeking a SecOps Engineer to design, implement, and operate its core security infrastructure and network security, with particular emphasis on securing and hardening the Kubernetes/container platform. This role is both hands-on and strategic: building secure-by-design infrastructure from the ground up before expanding into SOC/DFIR capability as the security baseline matures. The engineer will combine deep systems/platform expertise with security engineering judgment to close foundational gaps\nKey Responsibilities\n1. Security Architecture & Infrastructure\nDesign and implement Identity & Access Management (IAM/SSO) architecture and Single Sign-On integration across internal applications.\nDesign and implement Privileged Access Management (PAM) and Zero Trust Network Access (ZTNA) / identity-aware proxy solutions.\nDesign and implement network security architecture, including segmentation, firewalls, VPN, and secure remote access.\nBuild infrastructure using Infrastructure-as-Code (Terraform, Ansible) and version-controlled configuration where applicable.\n2. Platform & Container Security\nSupport the hardening of the company's Kubernetes platform: RBAC design, network policy, workload security baseline, secrets management.\nContribute to the rollout of Policy-as-Code (e.g., Kyverno, OPA) for cluster governance.\nCollaborate with the current Cluster Admin to reduce single-point-of-failure risk and support knowledge transfer / documentation.\n3. SOC Development & Operations\nSupport the design, implementation, and day-to-day operation of the company's SOC capabilities (SIEM, EDR, log management, monitoring pipelines).\nContribute to detection rule and alert logic development as SOC capability is built out.\n4. Threat Detection, Response & DFIR\nParticipate in security event investigation, containment, and remediation activities.\nContribute to DFIR playbooks, escalation paths, and evidence-handling procedures.\n5. Continuous Improvement & Collaboration\nAssist in tabletop exercises and simulations to validate incident response readiness.\nCollaborate with IT, InfraOps, AppSec, and Red Team functions to close security gaps.\nDocument architecture decisions, runbooks, and lessons learned.\nContribute to security policies, standards, and compliance initiatives (ISO 27001, etc.) incollaboration with the GRC team.\n\n We are looking for a highly motivated person with:\n2-3+ years of experience in security engineering, infrastructure/platform engineering, SRE, or DevSecOps.\nHands-on production experience operating Kubernetes — RBAC design and troubleshooting, network policy, workload/container security fundamentals.\nPractical experience designing or implementing at least one of: IAM/SSO (e.g., Keycloak, Okta, Azure AD), PAM, ZTNA / identity-aware proxy, or network security architecture (firewall, segmentation, VPN).\nStrong Linux system administration and scripting/automation skills (Python, Bash, PowerShell, or similar).\nFamiliarity with Infrastructure-as-Code and/or GitOps concepts (Terraform, Ansible, ArgoCD/Flux, or equivalent).\nA proactive attitude & the ability to think outside of the box.\nWorks in an organized, structured manner; can-do attitude, gets things done.\nExcellent communication skills with diverse audiences.\nStrong critical thinking and analytical skills.\nNice-to-have:\nExperience with SIEM platforms (ELK Stack, Wazuh, Splunk, Graylog) or EDR tools.\nFoundation skills in log analysis, network traffic analysis, or malware analysis.\nSolid understanding of security frameworks (MITRE ATT&CK, NIST CSF, CIS Benchmarks).\nFoundation knowledge in AI integration for security operations.\nEnglish communication.\nRelevant certifications: CKA/CKS, Security+, GCIA, GCIH, or equivalent.\n\n Ngành nghề: CNTT - Phần mềm, Bán lẻ / Bán sỉ\n\n Kinh nghiệm: 3 Năm\n\n Cấp bậc: Nhân viên\n\n Hình thức: Nhân viên chính thức\n\n Địa điểm: Hồ Chí Minh","description_format":"text","description_chars":3896,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-09-27T00:12:37Z"}],"liveness":{"score":80,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.798,"p_room":1,"age_days":4,"expected_fill_days":21,"reasons":["seen:4","win:early"],"computed_at":"2026-09-27T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/concung-com-secops-engineer","json_url":"https://alion.io/job/concung-com-secops-engineer.json","meta":{"generated_at":"2026-09-28T01:01:30Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":598,"day_limit":5000,"remaining_today":4402,"minute_limit":60,"resets_at":"2026-09-29T00:00:00Z"}}}