Cloud Security & DevSecOps Lead
A cloud security and DevSecOps lead with over a decade securing banking, fintech and retail systems, now designing AWS and GCP security architectures for platforms at multi-million-user scale. Integrates SCA, SAST and DAST into CI/CD, runs assessments and incident response, and drives compliance with ISO 27001, SOC 2, PCI DSS and regional financial regulations.
- Level
- Lead
- Experience
- 10+ years
- Based in
- Vietnam
- Languages
- English (good, TOEIC 800)
Selected work
- Fintech (Singapore client): designed cloud security architecture on AWS and GCP for a platform scaling to about 2M users, integrating third-party security tooling and Python Lambda automation.
- Fintech compliance: embedded SCA/SAST/DAST into CI/CD and led compliance work against ISO 27001, SOC 2, CIS, NIST, PCI DSS and regional technology-risk guidelines.
- Banking: secured a core-banking upgrade and led privileged-access, SIEM and vulnerability-management rollouts plus DR/BCP planning.
- Retail group: ran IT security for ~3,000 users and ~50 stores, including an ISO 27001 ISMS rollout and secure migration to Microsoft 365 and the cloud.
Domains
Fintech, Banking, Retail
Education
Engineering degree, Information Security