AI Security Engineer
at OPSWAT
- Work model
- Hybrid
- Location
- Ho Chi Minh City, Ho Chi Minh City, Vietnam
- Posted
- 5d ago
javascripttypescriptpythongollmci/cd
at OPSWAT
<div class="content-intro"><p><span class="acronym-highlight">OPSWAT</span>, a global leader in IT, <span class="acronym-highlight">OT</span>, and <span class="acronym-highlight">ICS</span> critical infrastructure cybersecurity, delivers an end-to-end platform that gives public and private sector organizations and enterprises the critical advantage needed to protect their complex networks, secure their devices, and ensure compliance. Over the last 20 years our commitment to innovative technology has earned the trust of more than 1,700 organizations, governments, and institutions globally, solidifying our role in protecting the world’s critical infrastructure and securing our way of life.</p></div><p><strong>The Position</strong></p> <p><span data-contrast="auto">We are seeking an <strong>AI Security Engineer</strong></span><strong><span data-contrast="none"> with strong Agentic AI development capabilities</span></strong> <span data-contrast="auto">to embed and operationalize security across the enterprise software development lifecycle.</span><span data-ccp-props="{"201341983":0,"335559739":0,"335559740":259}"> </span></p> <p><span data-contrast="auto">This role </span><strong><span data-contrast="none">combines</span></strong><span data-contrast="auto"> hands-on</span><strong><span data-contrast="none"> application security reviews and security </span></strong><span data-contrast="auto">control validation with the engineering of security automation, AI-enabled security tooling, and agentic AI workflows, </span><strong><span data-contrast="none">as well as the design and development of internal security tools based on requirements from leadership and cross-functional teams.</span></strong><span data-ccp-props="{"201341983":0,"335559739":0,"335559740":259}"> </span></p> <p><span data-contrast="auto">The engineer will partner closely with Product, Platform teams to ensure that enterprise in-house applications, APIs, AI services, autonomous agents, and MCP-based integrations are designed, built, tested, and operated with effective security controls.</span></p> <p><span data-contrast="auto"><span class="TextRun SCXW119538265 BCX0" lang="EN-US" data-contrast="auto"><span class="NormalTextRun SCXW119538265 BCX0">The role is a builder-defender hybrid: </span></span><span class="TextRun SCXW119538265 BCX0" lang="EN-US" data-contrast="auto"><span class="NormalTextRun SCXW119538265 BCX0">review systems, </span><span class="NormalTextRun SCXW119538265 BCX0">validate</span><span class="NormalTextRun SCXW119538265 BCX0"> security controls, automate repeatable checks, and design and develop internal security tools</span><span class="NormalTextRun SCXW119538265 BCX0">.</span></span></span></p> <p><strong>What you will be do:</strong></p> <ul> <li>Perform security reviews for enterprise in-house applications across architecture, design, code, APIs, cloud services, data flows, and deployment patterns. </li> <li>Embed security into the enterprise Secure SDLC for in-house applications from design and development through build, test, deployment, and runtime operation. </li> <li>Develop agentic AI workflows and tools that automate repeatable AppSec activities such as application intake, evidence collection, control checks, threat-model preparation, finding enrichment, risk summarization, remediation guidance, and ticket/workflow creation. </li> <li>Build secure integrations between AI agents and engineering/security platforms through APIs, webhooks, CI/CD interfaces, and approved tool connectors. </li> <li>Perform other duties as assigned by the direct supervisor. </li> </ul> <p><strong>What we need from you:</strong><strong> </strong></p> <ul> <li>Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Software or related field. </li> <li>3+ years of experience in application security or software engineering with meaningful security responsibilities. </li> <li>Strong hands-on software development skills (for example, Python, JavaScript/TypeScript, Go, or similar) </li> <li>Experience working with DevOps workflows, source control, pull requests, build pipelines, artifact repositories, and developer issue-tracking processes. </li> <li>Familiarity with application and AI security guidance such as OWASP Top 10 / API Security Top 10, OWASP ASVS, OWASP AI/LLM guidance, MITRE ATLAS, and secure development practices.</li> </ul><div class="content-conclusion"><p>OPSWAT is an equal opportunity employer. We celebrate diversity and are committed to providing an environment where equal employment opportunities are extended to all employees and applicants, free of discrimination and harassment of any type. All employment decisions are based on individual qualifications, job requirements, and business needs without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other category protected by federal, state, or local laws.</p> <p>Recruiting Agencies: we do not accept unsolicited resumes from third party agencies for any of our open positions. To submit resumes for our jobs, there must be a recruiting contract approved by our legal team and endorsed by both parties. We are currently not accepting additional 3rd party agencies at this time.</p> <p> </p></div>