CÔNG TY TNHH SẢN XUẤT VÀ THƯƠNG MẠI CMC

As a Senior Application Security Engineer you’ll be part of the team of security engineers working to ensure we build, maintain and deploy secure software that is used by millions of users around the globe. If you have a hacker mindset, are passionate about security and always looking to extend your knowledge, then this is the place for you.

Who you are

In order to really own this role, we think you’ll need:

● Good understanding of application security and common application security vulnerabilities;

● Good understanding of LLM and programming languages commonly used in AI development, such as Python.

Good understanding of OWASP Top 10 for LLM applications

● Good understanding of DevOps and cloud native technologies;

● Successful track record in identifying, triaging, and resolving security issues, including both application vulnerabilities and AI-specific threats

● A background in development and a good understanding of the SDLC;

● English language on a professional level, written and spoken.

We’ll be delighted if you bring experience in the following topics but otherwise these would be opportunities for you to grow your knowledge working in the security team:

● Implementing OWASP ASVS/M-ASVS and SKF;

● Implementing SAST, SCA, IAST and RASP tools in the SDLC;

● Facilitating threat modeling sessions for application and AI systems, identifying risks across traditional and AI-driven platforms.;

● Experience in penetration testing for web, mobile, and AI applications, with specific focus on assessing model vulnerabilities to adversarial attacks and other AI-specific security concerns.

● Training and guiding developers on application security concepts;

● Relevant regulations such as GDPR and PCI-DSS.