Security Engineer

# Security Engineer **Sen Works Viet Nam Co., Ltd.** | | | | --- | --- | | **Job Title** | Security Engineer | | **Department** | IT Services – Information Security | | **Reports To** | Head of Information Security / Client Security Lead [to be confirmed] | | **Employment Type** | Full-time labour contract with Sen Works Viet Nam Co., Ltd.; probation of up to 60 days | | **Work Location** | Vietnam – fully remote | | **Salary Range** | Up to USD3200 gross/month | 📩 **Apply:** send your CV to [jobs@senworks.com](mailto:jobs@senworks.com) --- ## About Sen Works Viet Nam Sen Works Viet Nam Co., Ltd. is a Vietnam-based technology and healthcare operations company delivering software development, IT services and revenue cycle management support to healthcare organisations in the United States and Europe. Our people work as dedicated, long-term members of our clients' teams, operating within each client's environment, tools and security standards. ## Role Summary In this role you will be dedicated to a US healthcare services client that operates a growing network of affiliated medical practices. You will work inside the client's Microsoft Azure and Microsoft 365 environment and collaborate daily with the client's US-based teams on systems that store, process or transmit protected health information (PHI). The Security Engineer is the primary architect and engineer of preventive and detective security controls across the client's endpoint, identity, network, cloud and application layers. You will lead the design, implementation and continuous improvement of the security control environment, run vulnerability management, and build the technical evidence that keeps the client audit-ready. ## Key Responsibilities ### Security Architecture & Engineering - Design, deploy and manage core security platforms: EDR, email security, identity protection, privileged access management, network security and data loss prevention. - Advance zero trust across identity, device, network and application layers, strengthening conditional access, MFA and least privilege. - Improve Azure and Microsoft 365 security posture through configuration baselines, policy as code and continuous posture management. - Set security standards, hardening baselines and reference architectures; run security design reviews for new systems, integrations, vendors and changes. ### Vulnerability & Threat Management - Lead the vulnerability management program: scanning coverage, risk-based prioritisation, remediation tracking and exception governance. - Align patching, configuration and end-of-life remediation with security priorities and clinical uptime requirements. - Direct penetration tests, red team engagements and attack surface management, and validate remediation. - Use threat intelligence and healthcare-sector attack trends to refine control priorities. ### Compliance Engineering & Detection Enablement - Build technical controls and evidence supporting HIPAA Security Rule, HITRUST, SOC 2 and client security requirements. - Strengthen SOC detection by engineering log sources, telemetry pipelines and automated response integrations. - Define measures for control coverage, vulnerability remediation and platform health; report control gaps, risk posture and investment priorities to leadership. - Manage security vendors, MSPs and consultants. ### Education & Certifications - Bachelor's degree in Cybersecurity, Computer Science, Information Systems or a related field; an equivalent combination of education, certifications and experience will be considered. - **CISSP, CCSP** or equivalent advanced security certification required; Microsoft SC-100 or AZ-500 preferred. ### Experience - 7+ years of information security experience, including at least 3 years in security engineering or architecture. - Experience designing and operating enterprise security platforms across endpoint, identity, email, network and cloud. - Proven success measurably reducing risk, e.g. remediation rates, MFA and EDR coverage, or reduced privileged access. - Experience supporting HIPAA, HITRUST, SOC 2 or ISO 27001 assessments with technical evidence and remediation. - Healthcare, healthcare technology or managed services experience is a strong advantage. ### Knowledge & Skills - Security controls in Azure, Microsoft 365 and hybrid Active Directory environments. - NIST CSF, NIST SP 800-53, CIS Controls and zero trust principles. - IAM, PKI, network segmentation, encryption and secure configuration management. - EDR, SIEM, SOAR, PAM, DLP, email security, vulnerability scanning and CSPM platforms. - PowerShell, Python and infrastructure as code for automation and evidence collection. - HIPAA Security Rule and HITRUST CSF control mapping (training provided). - Professional English (spoken and written) for daily work with US-based colleagues and clients. ### Personal Abilities - Design controls that reduce risk without impeding clinical workflows. - Translate emerging threats into practical control improvements and lead implementations through to handoff. - Present risk and architecture decisions clearly in English to executive and clinical leadership. ## Working Conditions - Flexible working hours, with an agreed daily overlap window with US-based teams for meetings and real-time collaboration; participation in a shared on-call escalation rotation for security incidents. - A dedicated, private workspace with stable high-speed internet suitable for handling confidential information and PHI. - Fully remote from Vietnam. - Prolonged computer use and extended phone and video communication; sustained concentration during incidents, maintenance windows and time-sensitive work. ## What We Offer - 💰 Salary reviewed annually. - 🏠 Flexible working hours and fully remote work. - 🎁 13th-month salary and performance bonus. - 🌙 Night-shift allowance in accordance with the Vietnam Labour Code for any additional hours worked at night. - 🏥 Full social, health and unemployment insurance in accordance with Vietnamese law, plus private healthcare insurance. - 📚 Company-sponsored certifications and training budget. - 💻 Company-managed laptop and equipment. - 🌴 Annual leave of at least 12 days plus Vietnamese public holidays. - 🌍 Long-term work with international teams on US healthcare technology. ---