At Sun Group, we are building a digital ecosystem serving millions of users every year. This means security is not just a defensive layer, but the foundation of the entire system.
We are looking for an Application Security Engineer to help build and shape application security capabilities from the start, not just testing, but participating in design, implementation and integrating security throughout the entire product lifecycle.
Job Description:
- Assess application security and build Threat Modeling for systems in On-premise, Cloud, Hybrid environments
- Participate in planning, designing architecture and implementing security solutions to ensure system safety following a security by design approach
- Assess risks, monitor system status, incidents and security vulnerabilities; propose short-term and long-term remediation/prevention solutions
- Conduct source code testing and application security assessment before and after deployment
- Analyze new vulnerabilities (1-day), build payload/PoC to verify impact level
- Participate in building and improving internal information security processes and policies
- Gradually participate in automation and AI application in application security processes
Requirements:
- Bachelor's degree in: Information Security, Software Technology...
- At least 4 years of experience in information security field.
- Knowledge of Security deployment in Cloud environments: AWS, Microsoft Azure...
- Experience in OT, IoT, Manufacturing system security
- Understanding of ISO-27001, NIST and information security policies/processes
- Mindset or interest in applying AI/Automation in security
- Priority given to candidates with information security certifications (CEH, OSCP, CISSP, etc.)
Development Direction:
We are directing Application Security development towards AI-first & Automation-driven approach, rather than traditional pentest model.
- Automation helps scale security operations, reducing dependence on manual testing
- AI is applied to analyze, detect and prioritize risks
- Security becomes part of the development process, not a final check step
This means:
- You will not just "find vulnerabilities" but participate in building systems that help detect and handle vulnerabilities more effectively
- Opportunity to work on real-world problems in cloud, system architecture and automation
- Develop as a modern Security Engineer, adapting to AI changes
Benefits:
- Competitive and attractive salary based on your capabilities.
- 13th month bonus and year-end bonus based on work performance.
- Full insurance coverage as regulated and Sun Care 24/7 health insurance.
- Special discounts when using services within Sun Group's ecosystem nationwide such as: Sun Phuquoc Airways, Sun World, Sun Hospitality, Sunshine Hospital... for yourself and family under employee benefits.
- Seniority policy, Housing stability - housing provision for employees (100% value)
- Professional training and career development opportunities.
- Work in a professional, dynamic and efficient environment
