Senior Security Engineer | Open Relocation to Vietnam
Senior Security Engineer at GFT conducts penetration testing and security assessments for banking applications, APIs, and cloud platforms, embedding security best practices into development and operations.
- Compensation
- Not disclosed
- Location
- Not listed
- Work setup
- Not specified
- Seniority
- Senior
- Employment
- Not specified
- Experience
- Not specified
- Category
- Security
- Posted
Skills
Must have
- Strong hands-on experience in security engineering, application security, vulnerability management, and security assessments across web, mobile, API, infrastructure, and cloud environments.
- Experience conducting or supporting penetration testing, ethical hacking, and vulnerability validation across enterprise applications and platforms.\
- Strong understanding of banking systems, digital banking, payments, AML/KYC, fraud management, and financial transaction workflows.
- Deep knowledge of application and API security, including OWASP Top 10, OWASP API Top 10, broken access control, injection, IDOR, authentication, authorisation, encryption, and business logic vulnerab
- Experience securing or assessing mobile applications on iOS and Android, including authentication, session management, local storage, certificate pinning, and secure communications.
- Good understanding of network, server, operating system, and infrastructure security principles, including common attack paths and hardening practices.
- Knowledge of cloud security principles and security controls across AWS, Azure, or GCP.
- Experience integrating security into engineering and DevOps practices, including CI/CD security, secure configuration, secrets management, and automation.
- Proficiency with security tools such as Burp Suite, OWASP ZAP, Nmap, Nessus, Metasploit, Wireshark, Postman, MobSF, or similar technologies.
- Ability to produce clear security documentation and communicate findings, risks, and remediation priorities to both technical and non-technical stakeholders.
Nice to have
- Experience working as a Security Engineer, Application Security Engineer, or Penetration Tester within banks, fintechs, payment platforms, or financial institutions.
- Knowledge of PCI DSS, ISO 27001, SOC 2, SWIFT CSCF, and other banking or financial services security standards.
- Experience with secure code review practices and SAST tools.
- Experience integrating security controls into CI/CD pipelines using SAST, DAST, SCA, container scanning, or secrets detection.
- Knowledge of container, Kubernetes, Docker, cloud, and Infrastructure-as-Code (IaC) security.
- Experience with red teaming, attack simulation, adversary emulation, or purple team exercises.
- Scripting or automation skills in Python, Bash, or PowerShell.
- Security certifications such as CEH, eJPT, PNPT, OSCP, GPEN, GWAPT, CISSP, CISM, or equivalent.
Full description
International Candidates Welcome to Relocate to VietnamAbout GFT
GFT Technologies is an AI-centric global digital transformation company. We design advanced data and AI transformation solutions, modernize technology architectures and develop next-generation core systems for industry leaders in Banking, Insurance, Manufacturing and Robotics. Partnering closely with our clients, we push boundaries to unlock their full potential. With deep industry expertise, cutting-edge technology, and a strong partner ecosystem, GFT delivers responsible AI-centric solutions that combine engineering excellence, high-performance delivery and cost efficiency. Our team of 12,000+ technology experts operates in 20+ countries worldwide offering career opportunities at the forefront of software innovation.
Role Summary
As a Senior Security Engineer at GFT, you will play a key role in strengthening the security posture of banking applications, APIs, cloud platforms, infrastructure, and digital systems. You will lead and support security assessments, identify and validate risks, drive remediation, and help embed security best practices across the software development lifecycle.
Working closely with security, engineering, DevOps, architecture, and business teams, you will deliver hands-on security engineering across web, mobile, API, network, and cloud environments. This role requires strong technical security expertise, experience working within regulated financial services environments, and the ability to balance proactive security engineering with practical business delivery. Flexibility to work onsite at client locations when required is expected.
Role Responsibilities
- Design, implement, and support security controls across applications, APIs, cloud platforms, infrastructure, and banking systems.
- Conduct security assessments, vulnerability assessments, and penetration testing across web, mobile, API, network, and cloud environments.
- Identify, validate, and document security vulnerabilities, including weaknesses related to authentication, authorisation, encryption, access control, session management, input validation, secrets management, and business logic.
- Partner with engineering, DevOps, and architecture teams to embed security controls and best practices into solution design, development, CI/CD pipelines, and production environments.
- Support secure SDLC activities including threat modelling, security design reviews, release security validation, and remediation planning.
- Review security posture across banking workflows, including payments, cards, accounts, AML/KYC, fraud management, and digital banking services.
- Produce clear security findings and risk reports with technical details, business impact, prioritised remediation recommendations, and validation outcomes.