Security Engineer (Blue Team)

ABOUT US:
At Gradion, we are the strategic partner for ambitious businesses, helping them achieve breakthrough growth through Digital Innovation and Deep Tech.
With a global vision and an AI-first approach, we enable clients to reshape strategies, optimize systems, and adopt cutting-edge technologies to create sustainable value.

From AI and data to cybersecurity, robotics, and large-scale enterprise platforms, Gradion designs practical solutions that lay the foundation for the next generation of billion-dollar companies.

OUR FACTS & FIGURES:
- 23+ years of expertise — Gradion builds digital platforms & deep-tech solutions.
- 3 continents: Asia, Europe and Africa.
- 300+ specialists across 7 countries Vietnam, Singapore, Thailand, Saudi Arabia, Germany, Egypt, Indonesia.
- 100+ enterprise clients, including several unicorns (e.g., Alaiko, HomeToGo, Roadsurfer).
- Vietnam’s Best IT Company – recognized by ITViec for 7 consecutive years, including 2 consecutive years of ranking #1 (2024 and 2025)
- ISO 27001.

In this role, you will:
• Implement defensive controls for web applications based on red team pentest findings (WAF configuration, secure headers, input validation).
• Monitor web application logs to detect exploitation attempts and anomalies.
• Execute incident response for web security incidents, perform root cause analysis, and validate vulnerability remediations.
• Harden cloud infrastructure configurations (IAM policies, encryption, network controls) from cloud security assessment results.
• Develop and maintain security monitoring playbooks, alerting rules, and remediation procedures for web/cloud environments.
• Collaborate with red team during purple team exercises to validate defensive effectiveness.

What you will bring:
• At least 2 years of experience in defensive security operations or SOC analyst roles.
• Strong understanding of web application security defenses (WAF, secure coding, API protection).
• Experience with a SIEM platform and log analysis for threat detection.
• Proficiency in cloud security services (AWS GuardDuty, Config, IAM ...or Azure/GCP equivalents).
• Skilled in scripting for security automation (Python, Bash) and basic Linux/Windows administration.
• Familiarity with MITRE ATT&CK framework and NIST/CIS compliance standards.
• Professional certifications like CompTIA CySA+, GCIH, or cloud security certs are advantageous.

What you'll love working here
🏆 Join Vietnam’s Best IT Company – Gradion Vietnam (formerly NFQ Vietnam) was recognized by ITViec for 7 consecutive years, including 2 successive years as the Winner. Work with some of the best minds in the industry and be part of a company that’s redefining how businesses scale through technology.
🌍 Career Growth & Tech Leadership – At Gradion, you’re not just coding or delivering features—you’re shaping innovative solutions. Collaborate closely with tech leads, gain hands-on exposure to critical product and business decisions, and receive mentorship from experts who’ve built scalable systems. Whether you aim to become a technical expert or a leader, we’ll empower your journey.
🚀AI-First Engineering & Strategic Consulting – Our engineering culture integrates AI as a core driver of design, development, and optimization—not an add-on. As a forward-thinking consultancy, we go beyond traditional engineering, combining technical excellence with a strategic mindset to deliver transformative solutions for ambitious businesses.
💰 Competitive Compensation – We believe great talent deserves great rewards. Expect an attractive salary, performance-based bonuses, and a benefits package that reflects your impact. We value talent over salary budgets—exceptional contributions deserve exceptional rewards.
✨ And Many More Benefits to Explore! But most importantly, a healthy work-life balance and an environment where you can thrive—professionally and personally. Including:
- A laptop is provided.
- Community Tech activities.
- A fun & dynamic environment and freedom to be creative.
- Modern office with a flexible, relaxing zone.
- Performance bonus (up to 2-month salary).
- Performance review 2 times/ year.
- Extra Premium Healthcare & Annual Health-check.
- 15 days of annual leave.

Working time: Monday – Friday (9 AM - 6 PM)

According to General Data Protection Regulation (GDPR), Singapore's Personal Data Protection Act (PDPA) and Vietnam's Personal Data Protection Law No. 91/2025/QH15, while also ensuring compliance with other applicable local data protection laws in the jurisdictions where we operate, including but not limited to Vietnam, Indonesia, Thailand, Egypt, Singapore, Germany, and Saudi Arabia, Gradion applies the “Personal Data Protection Policy” to all candidates to ensure compliance with the laws.
By submitting your application to Gradion, you acknowledge that you have read and understood our Recruitment Privacy Policy (linked) and consent to the collection, processing, and retention of your personal data in accordance with the purposes and conditions set out under the Personal Data Protection Law No. 91/2025/QH15 and the Policy.