About Knorex
Knorex is a publicly listed technology company, operating a global advertising technology (AdTech) platform that helps brands, agencies and publishers execute and optimize digital advertising campaigns at scale.
Our teams are distributed across multiple countries and work together to design, build and operate highly scalable cloud-based systems that process large volumes of real-time data and transactions globally. Security, reliability, automation and operational excellence are core to how we develop and operate our platforms.
As the company continues to grow and evolve, we remain committed to maintaining strong governance, security and compliance standards while enabling innovation and business growth.
Job Description
We are seeking a Security Engineer (Systems & Cloud) to help strengthen the security posture of our cloud infrastructure, corporate systems and engineering environments.
Working closely with Infrastructure, Systems and Engineering teams, you will be responsible for implementing and improving security controls, enhancing monitoring and incident response capabilities, supporting compliance initiatives, and driving security best practices across the organization.
This role offers exposure to a broad range of security domains including cloud security, DevSecOps, identity and access management, endpoint security, vulnerability management, security monitoring, incident response and audit/compliance programs. You will also help evaluate new technologies, automate security processes and continuously improve the security maturity of the organization.
Key Responsibilities
Cloud / Infrastructure Security & DevSecOps
- Design, implement and maintain security controls across cloud infrastructure and engineering environments.
- Secure and manage cloud environments including AWS, GCP, Kubernetes and related infrastructure services.
- Integrate security best practices into DevOps, CI/CD and software development workflows.
- Review infrastructure and system changes to identify security risks and recommend appropriate mitigations.
Identity, Endpoint & Corporate Security
- Manage identity and access controls, endpoint security and corporate security solutions.
- Establish and maintain security baselines and standards across corporate systems and user endpoints.
Security Operations & Incident Response
- Develop and maintain security monitoring, logging and alerting capabilities.
- Investigate, respond to and coordinate remediation of security incidents, alerts and vulnerabilities.
- Perform vulnerability assessments and drive remediation efforts across the organization.
Governance, Risk & Compliance
- Support compliance initiatives including ISO 27001, SOX ITGC and other security-related audits and assessments.
- Develop and maintain security policies, standards, procedures and operational runbooks.
- Promote security awareness and best practices across the organization and safeguard confidential information entrusted to Knorex.
Requirements
- At least 1–3 years of relevant experience in Information Security, Systems Engineering, Infrastructure Engineering, DevOps or related disciplines.
- Strong understanding of information security principles including identity and access management, network security, vulnerability management and incident response.
- Hands-on experience with Linux systems and at least one major cloud platform such as AWS or GCP.
- Familiarity with web infrastructure, cloud-native technologies and enterprise security tools.
- Exposure to security monitoring, vulnerability management, security operations and compliance frameworks such as ISO 27001 or SOX ITGC is advantageous.
- Comfortable with automation, scripting and solving operational problems through scalable solutions.
- Strong analytical, troubleshooting and problem-solving skills.
- Willingness to learn and able to pick up new technologies or new concepts fast.
- Able to work independently as well as in collaborative mode with minimum supervision.
- Work productively even under pressure.
- Possess good work ethic, attitude and strong awareness of information security and confidentiality.
- Excellent communication in written and spoken English.
- Possess at least a Degree or Diploma in Computer Science, Information Technology, Information Security, Engineering or related disciplines.
Benefits
- Attractive salary and performance bonus scheme
- 13th month salary
- Full participation in mandatory insurance programs in accordance with Vietnamese Labor Law
- W3F fund for learning and personal development
- Comprehensive Health Insurance Coverage
- Macbook provided
- Ample opportunities to grow and take ownership of impactful security initiatives
- Work with passionate, talented, and driven colleagues who get things done
- Opportunity to work cross-country and gain exposure to diverse projects and teams
- Challenging and exciting problems that await you to solve