Cloud Security Engineer/DevSecOps

***Note: We highly appreciate your interest in this position of HCLTECH Vietnam. After reviewing all applications, only qualified candidates will be contacted for the next steps within 15 days from date of submission!

ABOUT HCLTECH VIETNAM COMPANY LIMITED

HCL Vietnam Company Limited belongs to HCLTech which is a global technology company, home to 220,000+ people across 60 countries, delivering industry-leading capabilities centered around digital, engineering and cloud, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending Mar 31, 2025, totaled $13.8 billion. Website: https://www.hcltech.com/

JOB TITLE: Cloud Security Engineer/DevSecOps

CLIENT INDUSTRY: Information Technology/Multinational Technology Services

JOB LOCATION: Hanoi/Ho Chi Minh City, Vietnam (Hybrid working mode)

OVERVIEW OF THE ROLE:

As a person specializing in Cloud Security and DevSecOps at HCLTech, you will play a pivotal role in strengthening the security posture of our clients’ cloud environments. You will lead end-to-end remediation of cloud security non-compliance, enforce best practices, and deliver scalable solutions across multiple cloud platforms including AWS, Azure, and GCP. This high-impact position offers the opportunity to drive technical excellence, mentor teams, and shape the security framework of cuttingedge, large-scale cloud ecosystems.

WHAT YOU WILL DO:

• Lead and execute remediation of cloud security non-compliance issues at scale, ensuring timely resolution within established SLAs across AWS, Azure, and GCP environments.
• Provide technical guidance, define, and advocate best practices and coding standards for cloud security within the team.
• Mentor and develop team members, elevating their technical expertise and productivity.
• Oversee CIEM (Cloud Infrastructure Entitlement Management), focusing on identity and access management risks, excessive permissions, and entitlement governance.
• Implement and manage Kubernetes Security Posture Management (KSPM), including admission controllers, policy enforcement, and cluster-level remediation.
• Ensure robust container runtime security and oversee vulnerability remediation for both container images and running workloads.
• Identify and remediate security misconfigurations in serverless cloud architectures.
• Leverage the Wiz platform to enhance cloud security visibility and governance (preferred).
• Track and report on governance, compliance metrics, and remediation status to minimize exposure and risk.
• Ensure process compliance, participate in feasibility studies, technical reviews, and support architectural best practices.
• Prepare and submit regular status reports and manage project escalations to closure.

SKILL REQUIREMENTS:

Must-Have Qualifications:

• Proven hands-on experience with AWS Core Services and Azure Cloud Services.
• Demonstrated expertise in multi-cloud environments (AWS, Azure, GCP).
• Substantial experience in Cloud Security/DevSecOps roles, driving remediation and compliance at scale.
• Deep understanding of CIEM, IAM risks, and entitlement governance across major cloud platforms.
• Practical knowledge of Kubernetes security (KSPM), admission controllers, and policy enforcement.
• Strong grasp of container runtime security, as well as vulnerability management and remediation.
• Experience managing security for serverless architectures.
• Excellent skills in governance, reporting, and metrics tracking

Educational Background:

• Bachelor’s or Master’s degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent practical experience.

Certifications (Preferred):

• AWS Certified Security Specialty, Azure Security Engineer Associate, or relevant cloud security certifications.

Other Requirements (Optional)

• Hands-on experience with the Wiz security platform is highly desirable.
• Strong communication, analytical, and problem-solving skills.
• Experience in process compliance and technical consulting.
• Ability to work in a fast-paced, global team environment and manage multiple priorities.

CAREER DEVELOPMEMT OPPORTUNITIES:

At HCLTech, we are committed to fostering your professional growth. As a Technical Lead, you will have access to:

• Continuous learning through structured training programs, certifications, and workshops in cloud security and emerging technologies.
• Opportunities to lead large-scale, global projects and collaborate with industry-leading experts.
• Clear career advancement paths into roles such as Cloud Security Architect, Practice Head, or Senior Leadership.
• Participation in global knowledge-sharing forums, innovation labs, and cross-functional initiatives.
• A vibrant, inclusive culture that values thought leadership, creativity, and employee well-being.

BENEFITS

• Insurance plan based on full salary + 13th month salary
• 100% full salary from the 1st day of working and during WFH
• Medical Benefit (Bao Viet Insurance package) for Employee and Family
• Working in a fast paced, flexible, and multinational working environment. Chance to travel onsite (in 54 countries)
• Internal Training (Technical & Functional). Scope of English Training
• 18 paid leaves per year (including 12 annual leaves + 6 personal leaves)