- Location
- Ho Chi Minh City, Ho Chi Minh, Vietnam · published
- Type
- Full-time
- Department
- Engineering
- Source
- Workable
Description
About us
GoTyme is a multi-country digital banking group with global ambitions. We exist to unleash human potential by building simple, trusted money tools that bring millions of people into the financial mainstream and fuel real economies. Through technology, trust, and human connection, we reimagine banking through beautiful and empowering experiences. We are now serving more than 22M+ customers through a team of 2,000+ employees across 7 locations, including South Africa, the Philippines, Singapore, Hong Kong, Indonesia, India, and Vietnam.
GoTymeX is GoTyme’s Technology and Product Development Hub, building the engine behind the business. Our engineers, data scientists, product managers, and architects create and scale the platforms, products, and experiences that power GoTyme across markets.
Visit our Institutional Page
About the role
We are seeking a Security Analyst with strong investigation capabilities across endpoints (EDR/SIEM) and cloud environments (AWS, Microsoft Entra ID and O365). In addition, the candidate should bring an application security mindset to detecting and responding to threats affecting web applications, APIs and mobile applications.
The selected candidate will be responsible for (a) security monitoring and incident response, (b) cyber data analysis and automation, (c) vulnerability assessment, and (d) maintaining asset visibility and developing and improving security controls across our banking environment.
What you will do
Security Monitoring & Incident Response
- Continuously monitor security events across endpoints, cloud services, identities and applications to detect suspicious activity.
- Investigate incidents, establish timelines and impact, preserve evidence, and coordinate containment, remediation and recovery.
- Apply reverse-engineering techniques to suspicious applications, scripts and binaries to understand their behavior and support incident response.
- Use approved AI tools to assist with code analysis, artifact interpretation and investigation hypotheses, validating conclusions against source evidence.
- Document investigation findings, communicate incident status and next steps, and contribute to post-incident reviews and response playbooks.
Cyber Data Analysis & Automation
- Collect, normalize and correlate data from security controls on banking applications, EDR, SIEM, cloud infrastructure, cloud audit logs, identity platforms and application telemetry.
- Develop scripts and automated workflows for alert enrichment, evidence analysis, threat hunting and reporting.
- Identify data-quality and logging gaps that affect detection and investigation coverage.
- Use AI-assisted analysis to identify patterns and summarize findings while maintaining traceability, accuracy and protection of sensitive data.
Vulnerability Assessment
- Assess vulnerabilities across web applications, APIs, mobile applications, endpoints and cloud infrastructure.
- Validate findings, assess exploitability and business impact.
- Apply application security knowledge to identify weaknesses in authentication, authorization, session management, secure storage, payment transactions and business logic.
- Track remediation and verify that fixes address the underlying risks.
- Research emerging vulnerabilities and attack techniques to improve assessment and detection capabilities.
Asset Visibility & Security Controls
- Identify and document technology assets, ownership, criticality, data flows and dependencies.
- Develop and recommend risk-based security controls in collaboration with engineering and infrastructure teams.
- Oversee the security posture of systems through configuration reviews, access-control checks, asset inventories and monitoring of security-relevant changes.
- Evaluate control effectiveness, identify coverage gaps and recommend improvements to security monitoring and response procedures.