Application Security (AppSec) Engineer
Hạn nộp hồ sơ: 31/08/2026 (Còn 19 ngày)
Ứng tuyển sớm để được ưu tiên
Kết nối với Nhà tuyển dụng để tìm hiểu thông tin và gia tăng cơ hội trúng tuyển
Nhà tuyển dụng đang online
Mô tả công việc
Mô tả Công việc
We are seeking an Application Security Engineer to build and develop our application security capability. The core mandate is security: defining how the organization designs, builds, and ships software securely - spanning secure SDLC, DevSecOps, security architecture and design, application security testing, and developer enablement. The engineer drives security into the development lifecycle and CI/CD pipelines and fundamentally reduces security risk in software.
Key Responsibilities
Security by Design: Threat modeling, secure design review, security requirements; collaborate with architects to embed security into application design.
Security Architecture & Solutions: Recommend and implement security controls appropriate to each application's risk profile - e.g., WAF, API security, mobile app hardening (RASP / anti-tampering).
Application Security Testing: Operate SAST/DAST/SCA/SBOM tooling; triage findings, eliminate false positives, validate exploitability, and prioritize remediation by real risk.
Secure SDLC & DevSecOps Integration: Embed security gates and automated checks into CI/CD pipelines.
AppSec Maturity (OWASP SAMM): Run SAMM assessments, define the maturity roadmap, and measure improvement over time.
Developer Enablement: Secure coding training và Security Champions program.
We are seeking an Application Security Engineer to build and develop our application security capability. The core mandate is security: defining how the organization designs, builds, and ships software securely - spanning secure SDLC, DevSecOps, security architecture and design, application security testing, and developer enablement. The engineer drives security into the development lifecycle and CI/CD pipelines and fundamentally reduces security risk in software.
Key Responsibilities
Security by Design: Threat modeling, secure design review, security requirements; collaborate with architects to embed security into application design.
Security Architecture & Solutions: Recommend and implement security controls appropriate to each application's risk profile - e.g., WAF, API security, mobile app hardening (RASP / anti-tampering).
Application Security Testing: Operate SAST/DAST/SCA/SBOM tooling; triage findings, eliminate false positives, validate exploitability, and prioritize remediation by real risk.
Secure SDLC & DevSecOps Integration: Embed security gates and automated checks into CI/CD pipelines.
AppSec Maturity (OWASP SAMM): Run SAMM assessments, define the maturity roadmap, and measure improvement over time.
Developer Enablement: Secure coding training và Security Champions program.
Yêu cầu
Yêu Cầu Công Việc
Job Requirements
We are looking for a highly motivated person with:
2-3+ years of experience with Application Security Engineering or related Security roles.
Solid foundation in application security: OWASP Top 10 and beyond - common vulnerability classes, ability to read code and understand why a finding is (or isn't) exploitable.
Hands-on secure SDLC & secure design: threat modeling, secure design review, security requirements.
Strong understanding of SAST, DAST, SCA and SBOM tooling - interpreting results, triaging false positives, prioritizing by risk.
Ability to select the right tool for the right context (judgment, not tool-operation).
Working knowledge of CI/CD and automation as the delivery medium (Python/Bash).
Excellent collaboration and communication skills, with the ability to work closely with developers, architects, and operations teams.
A proactive attitude & the ability to think outside of the box
Works in an organised, structured manner
Can do attitude, gets things done
Excellent communication skills with diverse audiences
Strong critical thinking and analytical skills
Nice-to-have:
Practical OWASP SAMM (or BSIMM) implementation experience.
Security architecture experience: WAF, API security, mobile app shielding/RASP.
Awareness of secure-by-design frameworks/regulations: NIST SSDF, EU Cyber Resilience Act.
A relevant AppSec/offensive cert (OSWE, eWPTX, GWAPT, Burp Suite Certified, CSSLP) - tín hiệu lọc nền tảng security.
IaC security (Terraform/K8s/Helm), cloud security, English.
Benefit
Annual bonus: 2 - 3 months under minimum KPI requirement
Fast promotion opportunities based on personal ability
Work in a dynamic, open, creative environment
Regular training, company team building, birthday bonus
About [protected info]
Working time: 8:30 - 17:30 Monday - Friday
Working place: 6th Floor, 9 Nguyen Trai Street, Pham Ngu Lao Ward, District 1, Ho Chi Minh City
Job Requirements
We are looking for a highly motivated person with:
2-3+ years of experience with Application Security Engineering or related Security roles.
Solid foundation in application security: OWASP Top 10 and beyond - common vulnerability classes, ability to read code and understand why a finding is (or isn't) exploitable.
Hands-on secure SDLC & secure design: threat modeling, secure design review, security requirements.
Strong understanding of SAST, DAST, SCA and SBOM tooling - interpreting results, triaging false positives, prioritizing by risk.
Ability to select the right tool for the right context (judgment, not tool-operation).
Working knowledge of CI/CD and automation as the delivery medium (Python/Bash).
Excellent collaboration and communication skills, with the ability to work closely with developers, architects, and operations teams.
A proactive attitude & the ability to think outside of the box
Works in an organised, structured manner
Can do attitude, gets things done
Excellent communication skills with diverse audiences
Strong critical thinking and analytical skills
Nice-to-have:
Practical OWASP SAMM (or BSIMM) implementation experience.
Security architecture experience: WAF, API security, mobile app shielding/RASP.
Awareness of secure-by-design frameworks/regulations: NIST SSDF, EU Cyber Resilience Act.
A relevant AppSec/offensive cert (OSWE, eWPTX, GWAPT, Burp Suite Certified, CSSLP) - tín hiệu lọc nền tảng security.
IaC security (Terraform/K8s/Helm), cloud security, English.
Benefit
Annual bonus: 2 - 3 months under minimum KPI requirement
Fast promotion opportunities based on personal ability
Work in a dynamic, open, creative environment
Regular training, company team building, birthday bonus
About [protected info]
Working time: 8:30 - 17:30 Monday - Friday
Working place: 6th Floor, 9 Nguyen Trai Street, Pham Ngu Lao Ward, District 1, Ho Chi Minh City
Quyền lợi
Chế độ bảo hiểm
Du Lịch
Chế độ thưởng
Chăm sóc sức khỏe
Đào tạo
Tăng lương
Du Lịch
Chế độ thưởng
Chăm sóc sức khỏe
Đào tạo
Tăng lương
Thông tin chung
- Thu nhập: Cạnh tranh
Nơi làm việc
- Quận 1, Thành phố Hồ Chí Minh
Việc làm tương tự khác
Công Ty Dịch Vụ Kế Toán Odyssey Resources
Hồ Chí Minh, Phú Thọ, Phú Yên
Thương lượng
EL4 - Software Studio
Hồ Chí Minh, Đà Nẵng
range Up to VND 78,000,000
Công Ty Cổ Phần Thời Trang Yody - Chi Nhánh Hải Dương
Hồ Chí Minh, Long An
You'll love it
Hệ Thống Trường Pathway Tuệ Đức
Hồ Chí Minh
Thỏa thuận
CÔNG TY CỔ PHẦN CON CƯNG
Xem trang công ty- Địa chỉ công ty: 66 Nguyễn Du, Phường Bến Nghé, Quận 1, Thành phố Hồ Chí Minh, Việt Nam
- Quy mô: Trên 10.000 nhân viên
- Lĩnh vực: Bán lẻ/ Bán sỉ/ Thương mại, Hàng tiêu dùng
Thông tin công việc
Vị trí:
Nhân viên
Hình thức làm việc:
Toàn thời gian
Việc làm tương tự
Cảnh báo dấu hiệu lừa đảo tuyển dụng
Thu phí và cung cấp thông tin
- Phí hồ sơ, đồng phục, đặt cọc.
- Yêu cầu nộp bản gốc giấy tờ.
- Cung cấp mã OTP.
Hứa hẹn trúng tuyển 100%
- Không yêu cầu trình độ.
- Không cần thử việc.
Phỏng vấn bất thường
- Địa điểm xa văn phòng công ty.
- Phỏng vấn qua Telegram.
Yêu cầu làm nhiệm vụ
- Tải app, nạp tiền.
- Làm nhiệm vụ nhận thưởng.
Tin tuyển dụng sơ sài
- Mô tả công việc chung chung
- Nhiệm vụ đơn giản, thu nhập khủng
- Lỗi chính tả, đánh máy.
Đội ngũ hỗ trợ của JobOKO sẵn sàng đồng hành, tư vấn và giới thiệu những cơ hội việc làm phù hợp, giúp Ứng viên tự tin phát triển sự nghiệp và chinh phục mục tiêu nghề nghiệp bền vững.
Hotline CSKH
1900.63.63.84
Công ty Cổ phần JobOKO Toàn cầu
Đội ngũ hỗ trợ của JobOKO luôn chủ động tư vấn các giải pháp tuyển dụng tối ưu, cam kết đồng hành và hỗ trợ Quý Nhà tuyển dụng đạt được hiệu quả tuyển dụng bền vững.
Hotline CSKH
0962.107.888
Công ty Cổ phần JobOKO Toàn cầu
