Cyber Security Analyst

About us

GoTyme is a multi-country digital banking group with global ambitions. We exist to unleash human potential by building simple, trusted money tools that bring millions of people into the financial mainstream and fuel real economies. Through technology, trust, and human connection, we reimagine banking through beautiful and empowering experiences. We are now serving more than 22M+ customers through a team of 2,000+ employees across 7 locations, including South Africa, the Philippines, Singapore, Hong Kong, Indonesia, India, and Vietnam.

GoTymeX is GoTyme’s Technology and Product Development Hub, building the engine behind the business. Our engineers, data scientists, product managers, and architects create and scale the platforms, products, and experiences that power GoTyme across markets.

Visit our Institutional Page

About the role

We are seeking a Security Analyst with strong investigation capabilities across endpoints (EDR/SIEM) and cloud environments (AWS, Microsoft Entra ID and O365). In addition, the candidate should bring an application security mindset to detecting and responding to threats affecting web applications, APIs and mobile applications.

The selected candidate will be responsible for (a) security monitoring and incident response, (b) cyber data analysis and automation, (c) vulnerability assessment, and (d) maintaining asset visibility and developing and improving security controls across our banking environment.

What you will do

Security Monitoring & Incident Response

- Continuously monitor security events across endpoints, cloud services, identities and applications to detect suspicious activity.
- Investigate incidents, establish timelines and impact, preserve evidence, and coordinate containment, remediation and recovery.
- Apply reverse-engineering techniques to suspicious applications, scripts and binaries to understand their behavior and support incident response.
- Use approved AI tools to assist with code analysis, artifact interpretation and investigation hypotheses, validating conclusions against source evidence.
- Document investigation findings, communicate incident status and next steps, and contribute to post-incident reviews and response playbooks.

Cyber Data Analysis & Automation

- Collect, normalize and correlate data from security controls on banking applications, EDR, SIEM, cloud infrastructure, cloud audit logs, identity platforms and application telemetry.
- Develop scripts and automated workflows for alert enrichment, evidence analysis, threat hunting and reporting.
- Identify data-quality and logging gaps that affect detection and investigation coverage.
- Use AI-assisted analysis to identify patterns and summarize findings while maintaining traceability, accuracy and protection of sensitive data.

Vulnerability Assessment

- Assess vulnerabilities across web applications, APIs, mobile applications, endpoints and cloud infrastructure.
- Validate findings, assess exploitability and business impact.
- Apply application security knowledge to identify weaknesses in authentication, authorization, session management, secure storage, payment transactions and business logic.
- Track remediation and verify that fixes address the underlying risks.
- Research emerging vulnerabilities and attack techniques to improve assessment and detection capabilities.

Asset Visibility & Security Controls

- Identify and document technology assets, ownership, criticality, data flows and dependencies.
- Develop and recommend risk-based security controls in collaboration with engineering and infrastructure teams.
- Oversee the security posture of systems through configuration reviews, access-control checks, asset inventories and monitoring of security-relevant changes.
- Evaluate control effectiveness, identify coverage gaps and recommend improvements to security monitoring and response procedures.

Requirements

Who we are looking for

Required

- Bachelor’s degree in Computer Science, Computer Engineering, Information Systems, Information Security or a related field, and/or 3+ years of relevant work experience.
- Practical experience in security operations and incident response across endpoint, cloud or application environments.
- Strong understanding of web, API and mobile application security, including authentication, authorization, session management, secure storage and common attack techniques.
- Familiarity with OWASP Top 10, API security risks and mobile application security principles.
- Practical reverse-engineering and malware-analysis skills, including familiarity with static and dynamic analysis techniques.
- Hands-on experience with EDR, SIEM, log analysis and security investigation tools.
- Hands-on vulnerability assessment experience and the ability to distinguish validated risks from scanner findings.
- Hands-on experience investigating security events across AWS and Microsoft Entra ID and O365.
- Understanding of asset inventory, security configuration, access controls and continuous monitoring.
- Experience using AI to support security analysis, investigations and scripting.
- Strong analytical, documentation and communication skills, including explaining technical findings and business impact to non-technical stakeholders.

Nice to have

- Experience in banking or another regulated environment is an advantage.
- Relevant security certifications, such as GCIH, GCIA, CySA+ or AWS Certified Security – Specialty, are an advantage.

Working model/location

We follow a hybrid working model, based out of our office in Vietnam. Flexible working arrangements are available for discussion.

Benefits

What we will offer

- Competitive rewards: Performance-based bonus of up to 2 months, a pro-rated 13th-month salary, and equity participation in GoTyme Group.
- Benefits from day one: Full salary and benefits during probation, meal and parking allowances, insurance in line with Vietnamese labor law, and premium healthcare coverage for you and your family, with no seniority requirement.
- Time to recharge: 15 days of annual leave, 3 sick days, 1 birthday leave, and 1 Christmas leave.
- Room to grow: SMART goals and clear career opportunities, with access to technical seminars, conferences, and career talks.
- International exposure: A values-driven, agile working environment, with opportunities to travel overseas for training and work.
- A connected team: Internal hackathons and company events, including Town Halls, company trips, and team events.
- Work–life balance: A 40-hour workweek, Monday to Friday.

Disclaimer

- We receive a high volume of applications, so we may not be able to respond to every candidate individually. If your profile matches our requirements, our team will contact you to discuss next steps.
- Information shared during the recruitment process, including interview materials and case studies, is confidential to GoTymeX. We ask that candidates respect this and do not share it publicly or with third parties.
- GoTymeX does not charge candidates any fees at any stage of the recruitment process.
- GoTymeX will only contact candidates through official @ tyme.com (http://tyme.com/) email addresses. Please stay alert to messages, emails, or websites impersonating our company.