Senior App Security Engineer (DevSecOps, Automation)

Working Location:ETOWN CENTRAL BUILDING, 07 - 11 Doan Van Bo Street, District 4, HCMCResponsibilities:Build and integrate security automation into CI/CD workflows.Act as a security partner, coaching dev teams and guiding secure design.Operate SAST, DAST, SCA tools and lead vulnerability management.Deliver hands-on training and clear, actionable best practices.Research, evaluate, and implement new security automation or tools.Requirements:5+ years in application security or software engineering roles.Proficient in at least one language (Python, Java, Go, or C#).Hands-on with CI/CD systems and secure coding standards.Knowledgeable in common vulnerabilities (OWASP Top 10) and mitigation.Experience using/operating SAST, DAST, or SCA tools.Able to explain security concepts to both technical and non-technical teams.Familiarity with cloud and container platforms (AWS, Azure, GCP, Docker, Kubernetes). Nice-to-Have (But Not Required):Contributions to open-source security tools or security communities.Security certifications (e.g., OSCP, CISSP, CSSLP, or similar).Experience with threat modeling and red teaming.Background in building custom internal tools for security automation.Passion for mentoring, knowledge-sharing, and continuous improvement. Note: You don’t have to check every box! If you’re ready to grow in a fast-paced security environment, apply with confidence!