Head of Security Research and Ops

• Build the information security strategy for the group and for the services it brings to market.
• Run the security operations center, the incident response team and the research team.
• Set the direction for research: malware analysis, vulnerability hunting and building new detection capabilities.
• Lead the handling of major incidents and work with stakeholders, including regulators.
• Build and maintain the information security management system, preparing for audits and certifications.
• Recruit, train and develop the team of information security specialists.
• Report on information security risk to the board and propose the budget.

• At least 8 years in information security, including at least 3 years in a management role.
• Experience running a security operations center or an incident response team.
• Deep understanding of offensive and defensive techniques, malware analysis and vulnerability research.
• Solid grasp of governance frameworks and standards: ISO 27001, NIST CSF and domestic information security regulations.
• Leadership, team-building and board-level presentation skills.
• Candidates with a CISSP, CISM, OSCP or GCIH certification, or recognized published research, are preferred.
• Fluent English.

Information security governance · Threat research

• Income from 70 – 120 million VND/month, negotiable based on your ability and interview results.
• The salary discussed is net take-home income — the company covers social insurance, health insurance, unemployment insurance and personal income tax, so you receive the full agreed amount.
• Salary reviews twice a year; quarterly performance bonus and a 13th-month salary.
• Bonuses for public holidays, Tết, birthdays and long service, plus spot bonuses when a project lands.
• Full insurance contributions on your actual salary from the probation month onwards.
• Extended health insurance for permanent staff; annual health check-up.
• 12 days of annual leave a year, plus 1 more day for every year of service; public holidays as required by law.
• The company pays training and exam fees for international certifications along each role's track (AWS, Microsoft Azure, Google Cloud, CCNA/CCNP, CISSP, CEH, PMP, Scrum…).
• Work equipment provided as the job requires, plus an internal cloud infrastructure account for self-study and experimentation.
• A clearly published competency framework and promotion path, reviewed every 6 months.
• Opportunities to join projects with customers and group offices in Japan, Korea, Singapore, Australia, the United States and Dubai.
• Team-building activities, an annual company trip and sports clubs; our offices are in Grade A buildings.

Monday – Friday: 08:30 – 17:30, lunch break 12:00 – 13:30, working at the office.
Saturday: 08:30 – 12:00, working from home — no need to come into the office.
Sunday and statutory public holidays: off.
Work-from-home policy: up to 10 work-from-home days in every 30 days (Saturdays included), registered in advance with your direct manager.
No unplanned overtime. Roles on system duty follow a separate shift schedule, with a shift allowance and compensating days off.

You choose one of the three domestic offices when you apply: Ho Chi Minh City, Hanoi or Da Nang.
The group also has offices in Tokyo, Osaka, Fukuoka (Japan), Seoul (Korea), Sydney (Australia), California (United States), Singapore and Dubai — staff have the chance to work onsite or rotate by project.
The full address of each office is published in the website footer.

• Click “Apply now” and submit your CV directly in the system (PDF or Word, under 5 MB).
• Select the office you want to work at right on the application form — each position only shows the offices currently hiring for it.
• In your CV, please state the position you are applying for and your expected net take-home income.
• Selection process: CV screening within 5 working days → technical interview → interview with the hiring manager → offer letter.
• Applications are kept confidential and used only for HiTechCloud's recruitment purposes.