--- title: 'Analytics Engineer at OPSWAT' canonical: 'https://feeny.ai/job/analytics-engineer-opswat-ho-chi-minh-city-nf0b7fkmvrj0' type: 'job' last_seen: '2026-11-08' --- # Analytics Engineer at OPSWAT - **Company:** OPSWAT - **Location:** Ho Chi Minh City, Vietnam - **Posted:** 2024-03-11 - **Last confirmed live:** 2026-11-08 - **Apply:** https://www.opswat.com/jobs/4387391005?gh_jid=4387391005 ## Job description OPSWAT, a global leader in IT, OT, and ICS critical infrastructure cybersecurity, delivers an end-to-end platform that gives public and private sector organizations and enterprises the critical advantage needed to protect their complex networks, secure their devices, and ensure compliance. Over the last 20 years our commitment to innovative technology has earned the trust of more than 1,700 organizations, governments, and institutions globally, solidifying our role in protecting the world’s critical infrastructure and securing our way of life. The Position OPSWAT's data platform turns CRM and business-system data into governed, documented, tested tables that business teams can read without asking what a column means. It is built on dbt Core, layered source → staging → intermediate → mart, and it is migrating on two fronts: a large estate of legacy stored procedures into that model, one domain at a time, with value parity proven before anything is cut over and the warehouse platform itself, from Microsoft Fabric Warehouse to Azure PostgreSQL, potentially an Elastic Cluster. You will work across both engines while that move completes. As a member of the Data Engineering team, you will own the modelling for the domains assigned to you, and the programme's cross-cutting craft: the dbt layer standards and the tooling that enforces them. This is a hands-on modelling role for someone who wants their name on the rules, not just on the tickets. You will decide what "correct" looks like for a model, prove it with numbers, and make the standard checkable by script rather than by memory. You will work in an AI-assisted engineering workflow, where agentic tooling accelerates the work but the modelling decisions: grain, layer, parity. You will work as one half of a deliberate pairing: the Data Engineering team on the technical side, Product Analysts embedded in the product pods, one per business domain on the business side. Product Analysts own what the domain means, the certified metrics and their definitions, and whether the result is right in business terms. Analytics Engineering owns the technical spectrum: modelling, layers, grain, keys, tests, parity, and the standards and tooling the models are built to. Both halves write SQL and dbt; they bring the domain, you carry the technical bar, and the two halves answer for the same number. ## What You Will Be Doing - Model the business domains you are assigned in dbt Core from their source tables through layered staging and intermediate models to tested marts; working across Microsoft Fabric and Azure PostgreSQL as the platform migrates. - Work as the technical counterpart to the Product Analysts who own each business domain: they bring the business definition and the questions the data must answer; you make the models correct, tested, and proven by parity. - Build the tested marts that certified metrics sit on, so a Product Analyst's definition and the model beneath it never drift apart. - Prove value parity between each dbt mart and the legacy stored procedure it replaces: row counts and key aggregates recorded, not asserted, before any consumer is repointed. - Own and evolve the dbt layer standards, what belongs in each layer, where collation is normalised, one path in per source and the scripts that enforce them. - Declare and test primary keys, and write tests that fail when the model breaks, not checks that pass no matter what the data does. - Repoint consumers from legacy procedure outputs to dbt models in the right order (readers before procedures), and record each cutover so the sequence is auditable. - Work with your Data Engineering teammates to keep the production dbt build on schedule, so parity is a number tracked daily rather than a measurement obtained occasionally. - Review pull requests on the models you own within one working day; they are production-facing, so a mistake there has no legacy fallback. - Work with the Product Analysts and Data Engineers who own the other business domains wherever models meet at the boundaries. ## What we need from you - 3+ years in analytics engineering or data engineering, with production ownership of transformation models. - Expert SQL: window functions, CTEs, and multi-entity joins at warehouse scale; strong in the SQL Server / T-SQL dialect today, and fluent enough in PostgreSQL to move with the platform. - Hands-on dbt. You have built and maintained a dbt project (models, layers, refs, tests, documentation), not only run someone else's. - Dimensional modelling judgement: you can state the grain of a model, choose its keys, and place its logic in the right layer. - A git-based workflow: pull requests, CI checks, review discipline; plus Python for the tooling around the models. - Working fluency with AI-assisted engineering tooling. You set the task, review the output, and own what lands in production. - The ability to read a legacy stored procedure and say what business question it answers, and where it quietly disagrees with the documentation. - Comfort working directly with Product Analysts turning "this number looks wrong" into a testable question and a fix, and explaining a modelling trade-off in business terms. - Care at data boundaries: you treat a join that silently matches nothing as a defect, not a detail. It Would Be Great If You Also Have - Azure PostgreSQL (Elastic Cluster), Microsoft Fabric Warehouse, OneLake, or another Delta lakehouse in your background. - A warehouse platform migration you helped carry: engine, dialect, or both. - Experience migrating stored procedures or warehouse SQL into a transformation framework such as dbt. - Airflow (or similar) orchestration experience. - Data-quality, lineage, or parity/audit tooling in your history. - Standards or tooling you authored that other engineers actually follow. What success looks like in your first 60 days - The domains assigned to you move through the cutover stages: modelled to the layer standards → readers repointed → value parity proven with recorded numbers → cutover recorded. - New and modified models pass the layer-standards check, and declared primary keys resolve against the columns the models actually emit. - Parity coverage for your domain is a tracked figure, published, not a one-off measurement. - Pull-request reviews on the models you own land within one working day. - The Product Analysts you pair with treat your models as the source of truth for their domain, their certified metrics trace back to marts you own, and they can read those models without asking what a column means. OPSWAT is an equal opportunity employer. We celebrate diversity and are committed to providing an environment where equal employment opportunities are extended to all employees and applicants, free of discrimination and harassment of any type. All employment decisions are based on individual qualifications, job requirements, and business needs without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other category protected by federal, state, or local laws. Recruiting Agencies: we do not accept unsolicited resumes from third party agencies for any of our open positions. To submit resumes for our jobs, there must be a recruiting contract approved by our legal team and endorsed by both parties. We are currently not accepting additional 3rd party agencies at this time. ## About OPSWAT ## Company Overview - **One-liner**: OPSWAT protects the world’s critical infrastructure by securing every file, device, and data transfer across IT, OT, and air-gapped networks using its AI-powered MetaDefender Platform. - **Entity Type**: Private (venture-backed; $125M total funding raised; bootstrapped for many years) - **Headquarters**: Tampa, Florida, United States - **Founded**: 2002 - **Founders**: Benny Czarny ## Core Business - **Primary industry**: Cybersecurity (critical infrastructure protection) - **Target customers**: B2B, Enterprise, Government – including nuclear facilities, defense networks, energy grids, financial institutions, and other mission-critical organizations. - **Mission / purpose**: “Trust no file. Trust no device.” – prevent known, unknown, and AI-generated threats from reaching the systems the world depends on. ## Products & Services - **MetaDefender Platform** (SaaS / On-premises / Hybrid): Unified cybersecurity platform providing file security, email security, removable media protection, network security, cross-domain transfer, endpoint compliance, and cloud security. Key technologies: Deep CDR™ (Content Disarm and Reconstruction), Metascan™ Multiscanning (30+ anti-malware engines), AI-driven threat prediction, Adaptive Sandbox, Proactive DLP, and File-Based Vulnerability Assessment. - **Peripheral & Removable Media Protection**: Kiosk-based scanning and compliance enforcement for USB drives and transient assets. - **Managed File Transfer**: Secure cross-boundary file movement with built-in threat prevention, policy enforcement, and audit trails. - **Data Diode & Security Gateway Solutions**: Hardware-enforced unidirectional data transfer for air-gapped and segmented networks. - **Email Security**: Neutralizes weaponized attachments and embedded threats using Deep CDR and Multiscanning. - **Access & Endpoint Security (OESIS Framework)**: Assesses device posture before granting network access, covering managed and unmanaged devices. - **OPSWAT Academy**: Professional certification in Critical Infrastructure Protection (CIP) – 28 courses, 456,000+ registered students, 268,000+ certified. ## Market Standing - **Valuation / Market Cap**: Not publicly disclosed - **Key Metric**: Annual Revenue $110M (LinkedIn, 2025 estimate); Total Funding $125M - **Notable Investors / Partners**: Not explicitly listed in search results, but the company is trusted by 98% of U.S. nuclear power facilities and 1,500+ organizations in 80+ countries - **Growth Signals**: 854 employees (+16.9% YoY, +167 people); operates in 28 countries (including Vietnam, Romania, Hungary, UK, Israel); pre-validated against NIST 800-53, CMMC 2.0, NERC CIP, Zero Trust, ISO 27001, SOC 2, NEI 08-09 Rev 6 ## Competitive Advantages - **Prevention-first philosophy** – stops threats before execution, unlike detection-based tools. - **Deep CDR™ Technology** – reconstructs files to remove malware while preserving usability. - **Multiscanning with 30+ anti-malware engines** – near 100% detection rate. - **AI embedded natively** – predicts and neutralizes AI-generated threats. - **Air-gap and cross-domain expertise** – data diodes and security gateways for the most sensitive networks. - **Regulatory compliance** – validated for the world’s most rigorous standards in nuclear, defense, and critical infrastructure. ## Strategic Focus - **Deepening AI capabilities** in threat prediction and content verification. - **Expanding the MetaDefender Platform** to cover more attack surfaces (Cloud, OT, IT). - **Growing the OPSWAT Academy** to train a global workforce in CIP. - **Scaling global reach** – already in 28 countries, targeting more government and enterprise segments. ## Why Work Here - **Culture**: Mission-oriented, innovative, transparent, and collaborative. “You are trusted to do your job” – teams have ownership and autonomy. Open communication across all levels. - **Remote / Hybrid / Office**: Flexible-work arrangements; global offices in Tampa, Vietnam, Romania, Hungary, UK, Israel, and others. - **Compensation & Benefits**: Competitive salaries, excellent insurance, stock options, generous PTO, multifaceted reward programs, quarterly/annual reviews. - **Workplace Wellness**: Green office spaces, workout/exercise facilities, friendly environment, work-life balance emphasis. - **Training & Development**: OPSWAT Academy provides privileged CIP certification; mentorship and career growth programs. - **Recognition**: Named one of the best companies to work for in Asia by HR Asia Magazine. ## Sources 1. [OPSWAT Website](https://www.opswat.com/) 2. [OPSWAT Company Page](https://www.opswat.com/company) 3. [OPSWAT About Page](https://www.opswat.com/company/about) 4. [OPSWAT Careers Page](https://www.opswat.com/careers) 5. [OPSWAT LinkedIn](https://www.linkedin.com/company/opswat) ## Other roles at OPSWAT - [AI Engineer, Employee Products](https://feeny.ai/job/ai-engineer-employee-products-opswat-emea-dxk6wy1zn5v8) — EMEA - [Senior AI Engineer, Marketing](https://feeny.ai/job/senior-ai-engineer-marketing-opswat-americas-hew8enfk1k57) — Americas - [Senior AI Engineer, Marketing](https://feeny.ai/job/senior-ai-engineer-marketing-opswat-emea-sp65n1v8bdxy) — EMEA - [Senior Solution Engineer (IT)](https://feeny.ai/job/senior-solution-engineer-it-opswat-americas-3j26v334x6t7) — Americas - [Software Engineer - SBOM](https://feeny.ai/job/software-engineer-sbom-opswat-ho-chi-minh-city-etea8rqebb5s) — Ho Chi Minh City, Vietnam - [L2 Technical Support Engineer (remote)](https://feeny.ai/job/l2-technical-support-engineer-remote-opswat-timisoara-5kztd3e7jb91) — Timișoara, Romania - [Marketing Operations Coordinator - India](https://feeny.ai/job/marketing-operations-coordinator-india-opswat-bengaluru-4sp79qt34gwn) — Bengaluru, India - [Customer Experience Manager](https://feeny.ai/job/customer-experience-manager-opswat-tokyo-cz2hgaaxesd2) — Tokyo, Japan - [DevSecOps Engineer](https://feeny.ai/job/devsecops-engineer-opswat-ho-chi-minh-city-haq6h6jdv4a4) — Ho Chi Minh City, Vietnam - [AI Native Software Engineer - Secure File Gateway](https://feeny.ai/job/ai-native-software-engineer-secure-file-gateway-opswat-ho-chi-minh-city-zx24xb6sjbp9) — Ho Chi Minh City, Vietnam