DevSecOps and Platform Engineer
DevSecOps & Platform Engineer on the SRE team at Trusting Social, an AI fintech company in Ho Chi Minh City. Day to day: owning security tooling and vulnerability management, operating Kubernetes and Terraform across AWS/GCP/Azure, improving CI/CD security gates, and building monitoring and automation with Prometheus, Grafana, Datadog, and Python/Golang/TypeScript.
- Compensation
- Not disclosed
- Location
- Ho Chi Minh City, Ho Chi Minh, Vietnam
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 5+ years
- Category
- Devops
- Posted
Skills
Must have
- 2+ years hands-on experience in Cloud (AWS, GCP, or Azure), DevOps, SRE, Security, or Automation, or equivalent depth via personal projects and open-source contributions
- Degree in Computer Science, IT, Computer Engineering, Cybersecurity, or related field, or equivalent practical experience
- Linux command line proficiency: SSH, filesystem, basic networking commands
- Containerization with Docker: build, run, optimize images (docker-compose is a plus)
- Basic scripting in at least one language: Python, Golang, or TypeScript/JavaScript (Bash is a plus)
- Basic understanding of at least one cloud platform: AWS, GCP, or Azure
- Strong English communication skills (spoken and written — professional fluency required)
- High adaptability and comfort operating in fast-paced, ambiguous environments
- Uses AI tools actively for security analysis, script generation, and documentation
- Takes initiative to raise and fix gaps in pipelines, alerts, or processes without being directed
- Communicates with precision in runbooks, incident notes, and async channels
Nice to have
- Familiarity with Kubernetes (pods, deployments, services)
- Familiarity with CI/CD tools (GitHub Actions, GitLab CI) and Git workflows
- Terraform or SAST/DAST tool experience
Full description
##
Location: Ho Chi Minh City,Ho Chi Minh,Vietnam
Trusting Social is an AI Fintech pioneer that's revolutionizing credit access in emerging markets. Our mission is "Advancing AI to Meet the Financial Needs of Everyday Consumers with Empathy." We've assessed over 1 billion consumers across four countries, and we're on a mission to provide 100 million credit lines using the power of AI and Big Data.
How You'll Make an Impact
The SRE team operates the backbone of a multi-cloud, AI-driven fintech platform — running Kubernetes clusters, CI/CD pipelines, cloud infrastructure, and security tooling across GCP, AWS, and Azure at real production scale. As a DevSecOps & Platform Engineer, you own significant slices of the security, platform, and automation layers that development and AI/ML teams depend on every day. You operate independently on well-scoped problems, take end-to-end ownership of your domains, and are trusted to design and ship changes to production systems.
What You'll Do
Security & DevSecOps Operations
- Own security tooling end-to-end: design, deploy, configure, and validate WAF rules, GitHub Advanced Security scans, and CI/CD security gates — verifying they catch what they’re meant to catch, then tuning them to reduce noise.
- Drive vulnerability management across applications, infrastructure, and containers; triage CVEs by real risk, track them to closure, and improve the process so nothing slips.
- Build and maintain log collection and normalization from multiple sources (applications, infrastructure, security tools) and design alerting for SOC/SRE/DevSecOps..
Platform & Cloud Infrastructure
- Operate and improve Kubernetes workloads: deploy applications, diagnose pod and service issues, and go beyond the runbook — extending and authoring runbooks as you resolve novel failures.
- Design and maintain Infrastructure as Code (Terraform) for real cloud resources across AWS, GCP, and Azure, holding DevSecOps/SRE standards as the baseline and raising it where it’s weak.
- Support and harden the AI Platform: ensure the resources, tooling, and environments AI/ML teams need for experiments, training, and inference are provisioned, secure, and reliable.
Automation & CI/CD
- Build and own automation in Python, Golang, TypeScript, or Bash that removes manual work across provisioning, health checks, security checks, billing data collection, and asset inventory — owning the outcome, not just the code.
- Improve CI/CD pipelines on GitHub Actions: add and maintain lint, SAST, and dependency-scan stages, ensuring the gates actually block bad changes rather than merely running.
Monitoring & Incident Response