{"id":4057853,"url":"https://alion.io/job/gotymex-cyber-security-analyst","title":"Cyber Security Analyst","company":{"id":3827705,"name":"GoTymeX","domain":"gotymex.com","url":"https://alion.io/company/gotymex","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":{"grade":"A","score":95,"open_postings":4,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":121,"computed_at":"2026-11-11T05:49:22Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Ho Chi Minh City, Vietnam"],"countries":["VN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"SIEM","optional":false},{"name":"OWASP Top 10","optional":true}],"status":"live","first_seen_at":"2026-11-11T06:23:38Z","employer_posted_date":"2026-11-11","last_verified_at":"2026-11-11T15:40:36Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"About us\nGoTyme is a multi-country digital banking group with global ambitions. We exist to unleash human potential by building simple, trusted money tools that bring millions of people into the financial mainstream and fuel real economies. Through technology, trust, and human connection, we reimagine banking through beautiful and empowering experiences. We are now serving more than 22M+ customers through a team of 2,000+ employees across 7 locations, including South Africa, the Philippines, Singapore, Hong Kong, Indonesia, India, and Vietnam.\nGoTymeX is GoTyme’s Technology and Product Development Hub, building the engine behind the business. Our engineers, data scientists, product managers, and architects create and scale the platforms, products, and experiences that power GoTyme across markets.\nVisit our Institutional Page\nAbout the role\nWe are seeking a Security Analyst with strong investigation capabilities across endpoints (EDR/SIEM) and cloud environments (AWS, Microsoft Entra ID and O365). In addition, the candidate should bring an application security mindset to detecting and responding to threats affecting web applications, APIs and mobile applications.\nThe selected candidate will be responsible for (a) security monitoring and incident response, (b) cyber data analysis and automation, (c) vulnerability assessment, and (d) maintaining asset visibility and developing and improving security controls across our banking environment.\nWhat you will do\nSecurity Monitoring & Incident Response\nContinuously monitor security events across endpoints, cloud services, identities and applications to detect suspicious activity.\nInvestigate incidents, establish timelines and impact, preserve evidence, and coordinate containment, remediation and recovery.\nApply reverse-engineering techniques to suspicious applications, scripts and binaries to understand their behavior and support incident response.\nUse approved AI tools to assist with code analysis, artifact interpretation and investigation hypotheses, validating conclusions against source evidence.\nDocument investigation findings, communicate incident status and next steps, and contribute to post-incident reviews and response playbooks.\nCyber Data Analysis & Automation\nCollect, normalize and correlate data from security controls on banking applications, EDR, SIEM, cloud infrastructure, cloud audit logs, identity platforms and application telemetry.\nDevelop scripts and automated workflows for alert enrichment, evidence analysis, threat hunting and reporting.\nIdentify data-quality and logging gaps that affect detection and investigation coverage.\nUse AI-assisted analysis to identify patterns and summarize findings while maintaining traceability, accuracy and protection of sensitive data.\nVulnerability Assessment\nAssess vulnerabilities across web applications, APIs, mobile applications, endpoints and cloud infrastructure.\nValidate findings, assess exploitability and business impact.\nApply application security knowledge to identify weaknesses in authentication, authorization, session management, secure storage, payment transactions and business logic.\nTrack remediation and verify that fixes address the underlying risks.\nResearch emerging vulnerabilities and attack techniques to improve assessment and detection capabilities.\nAsset Visibility & Security Controls\nIdentify and document technology assets, ownership, criticality, data flows and dependencies.\nDevelop and recommend risk-based security controls in collaboration with engineering and infrastructure teams.\nOversee the security posture of systems through configuration reviews, access-control checks, asset inventories and monitoring of security-relevant changes.\nEvaluate control effectiveness, identify coverage gaps and recommend improvements to security monitoring and response procedures.\nRequirements\nWho we are looking for\nRequired\nBachelor’s degree in Computer Science, Computer Engineering, Information Systems, Information Security or a related field, and/or 3+ years of relevant work experience.\nPractical experience in security operations and incident response across endpoint, cloud or application environments.\nStrong understanding of web, API and mobile application security, including authentication, authorization, session management, secure storage and common attack techniques.\nFamiliarity with OWASP Top 10, API security risks and mobile application security principles.\nPractical reverse-engineering and malware-analysis skills, including familiarity with static and dynamic analysis techniques.\nHands-on experience with EDR, SIEM, log analysis and security investigation tools.\nHands-on vulnerability assessment experience and the ability to distinguish validated risks from scanner findings.\nHands-on experience investigating security events across AWS and Microsoft Entra ID and O365.\nUnderstanding of asset inventory, security configuration, access controls and continuous monitoring.\nExperience using AI to support security analysis, investigations and scripting.\nStrong analytical, documentation and communication skills, including explaining technical findings and business impact to non-technical stakeholders.\nNice to have\nExperience in banking or another regulated environment is an advantage.\nRelevant security certifications, such as GCIH, GCIA, CySA+ or AWS Certified Security - Specialty, are an advantage.\nWorking model/location\nWe follow a hybrid working model, based out of our office in Vietnam. Flexible working arrangements are available for discussion.\nBenefits\nWhat we will offer\nCompetitive rewards: Performance-based bonus of up to 2 months, a pro-rated 13th-month salary, and equity participation in GoTyme Group.\nBenefits from day one: Full salary and benefits during probation, meal and parking allowances, insurance in line with Vietnamese labor law, and premium healthcare coverage for you and your family, with no seniority requirement.\nTime to recharge: 15 days of annual leave, 3 sick days, 1 birthday leave, and 1 Christmas leave.\nRoom to grow: SMART goals and clear career opportunities, with access to technical seminars, conferences, and career talks.\nInternational exposure: A values-driven, agile working environment, with opportunities to travel overseas for training and work.\nA connected team: Internal hackathons and company events, including Town Halls, company trips, and team events.\nWork-life balance: A 40-hour workweek, Monday to Friday.\nDisclaimer\nWe receive a high volume of applications, so we may not be able to respond to every candidate individually. If your profile matches our requirements, our team will contact you to discuss next steps.\nInformation shared during the recruitment process, including interview materials and case studies, is confidential to GoTymeX. We ask that candidates respect this and do not share it publicly or with third parties.\nGoTymeXdoes not charge candidates any fees at any stage of the recruitment process.\nGoTymeX will only contact candidates through official @ tyme.com email addresses. Please stay alert to messages, emails, or websites impersonating our company.","description_format":"text","description_chars":7132,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Annual leave","Company events","Equity","Flexible schedule","Hybrid work"],"hiring_locations":[{"name":"Vietnam","iso":"VN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Financial Software & Embedded Finance","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-11-11T06:23:38Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":121,"reasons":["conf:0","win:early"],"computed_at":"2026-11-11T15:47:05Z"},"pay":null,"html_url":"https://alion.io/job/gotymex-cyber-security-analyst","json_url":"https://alion.io/job/gotymex-cyber-security-analyst.json","meta":{"generated_at":"2026-11-11T15:47:05Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":29515,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3827705},"rest":"https://alion.io/mcp/rest/get_company?id=3827705"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgotymex-cyber-security-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgotymex-cyber-security-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgotymex-cyber-security-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/gotymex-cyber-security-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgotymex-cyber-security-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4057853}},{"tool":"search_jobs","arguments":{"company":"gotymex.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4057853},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}