{"id":1328037,"url":"https://alion.io/job/urbox-security-engineer","title":"Security Engineer","company":{"id":49482,"name":"UrBox","domain":"urbox.vn","url":"https://alion.io/company/urbox","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Ho Chi Minh City, Vietnam"],"countries":["VN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":13000,"max_usd":31000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":613},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon EKS","optional":false},{"name":"Amazon S3","optional":false},{"name":"AWS","optional":false},{"name":"Graylog","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"OWASP ASVS","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Prowler","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Wazuh","optional":false}],"status":"live","first_seen_at":"2026-09-16T22:01:21Z","employer_posted_date":null,"last_verified_at":"2026-09-16T22:01:21Z","board_verified":false,"closed_at":null,"days_open":24,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":24},"description":"About the Role\nWe are looking for a Security Engineer to strengthen the security of UrBox’s software applications and cloud infrastructure.\nYou will work across Application Security, AWS Cloud Security, Security Monitoring, Incident Response, and Vulnerability Management, partnering closely with Engineering and Infrastructure teams to identify risks, improve security controls, and drive remediation.\nThis is a hands-on role for someone who can understand technical risks, investigate security issues, and work directly with engineers to implement practical security improvements.\nMain Responsibilities\n1. Application Security (AppSec)\nReview security designs for new features, including authentication, OTP, KYC, and payment flows.\n\nManage penetration testing and track remediation; work with developers to fix vulnerabilities.\n\nControl the API attack surface, including inventory, identification of zombie/shadow APIs, and endpoint classification.\n\nConduct secure code reviews and provide secure coding guidance to development teams.\n\n2. Cloud Infrastructure Security (AWS)\nManage cloud security posture through scanning, configuration assessments, and hardening.\n\nSecure IAM and network security, including Security Groups and EKS.\n\nManage data encryption, including EBS and S3.\n\nManage secrets, logging, and audit trails, including CloudTrail.\n\n3. Technical Monitoring & Incident Response\nOperate SIEM and log monitoring tools, including Graylog, Wazuh, or equivalent; detect abnormal activities.\n\nInvestigate and handle technical security incidents.\n\nDevelop detection rules and conduct threat hunting.\n\n4. Vulnerability Management\nConduct periodic vulnerability scanning across infrastructure, dependencies, and containers.\n\nPrioritize and track vulnerability remediation based on risk levels.\n\n Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Security, or a related field.\nCyber Security, Information Security, Computer Science, Software Engineering, or equivalent.\nAble to read and understand technical English documents and security standards.\n3–5+ years of experience in security, with a focus on Application Security and/or Cloud Security.\nExperience in fintech or e-commerce platforms is preferred.\n\nAWS Security certifications, OSCP, or equivalent certifications are preferred.\n\nStrong knowledge of AWS Cloud Security, including IAM, EKS/container security, network security, encryption, and scanning tools such as Prowler or equivalent.\n\nStrong knowledge of Application Security, including OWASP Top 10 and ASVS, with a deep understanding of vulnerabilities such as SSRF, injection, IDOR, and insecure authentication/OTP design.\n\nExperience with SIEM and log analysis using Graylog, Wazuh, or equivalent tools.\n\nAbility to read and understand code and work directly with developers on vulnerability remediation.\n\nFirst-principles thinking and the ability to independently analyze technical security risks.\n\nAbility to translate vulnerabilities into clear priorities for development teams.\n\nExperience in fintech or payment environments, with an understanding of payment security.\n\nScripting skills in Python or Bash for automating security scanning and checks.\n\nExperience with container and Kubernetes security.\n\n Ngành nghề: CNTT - Phần mềm\n\n Kinh nghiệm: 3 Năm\n\n Cấp bậc: Nhân viên\n\n Hình thức: Nhân viên chính thức\n\n Địa điểm: Hồ Chí Minh","description_format":"text","description_chars":3400,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security"],"lifecycle":[{"event":"open","at":"2026-09-27T06:15:58Z"}],"visa":[],"liveness":{"score":29,"band":"fade","label":"Fading","p_open":0.85,"p_active":0.62,"p_room":0.55,"age_days":23,"expected_fill_days":19,"reasons":["seen:23","win:tail"],"computed_at":"2026-10-10T05:45:15Z"},"pay":null,"html_url":"https://alion.io/job/urbox-security-engineer","json_url":"https://alion.io/job/urbox-security-engineer.json","meta":{"generated_at":"2026-10-11T20:40:21Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8941,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":49482},"rest":"https://alion.io/mcp/rest/get_company?id=49482"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Furbox-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Furbox-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Furbox-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/urbox-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Furbox-security-engineer"}]}