OPSWAT

AI Security Engineer

OPSWAT  •  Ho Chi Minh City, VN (Remote)  •  2 days ago
Apply
AI can make mistakes so check important info. Chat history is never stored.

Job Description

OPSWAT, a global leader in IT, OT, and ICS critical infrastructure cybersecurity, delivers an end-to-end platform that gives public and private sector organizations and enterprises the critical advantage needed to protect their complex networks, secure their devices, and ensure compliance. Over the last 20 years our commitment to innovative technology has earned the trust of more than 1,700 organizations, governments, and institutions globally, solidifying our role in protecting the world’s critical infrastructure and securing our way of life.

The Position

We are seeking an AI Security Engineer with strong Agentic AI development capabilities to embed and operationalize security across the enterprise software development lifecycle.

This role combines hands-on application security reviews and security control validation with the engineering of security automation, AI-enabled security tooling, and agentic AI workflows, as well as the design and development of internal security tools based on requirements from leadership and cross-functional teams.

The engineer will partner closely with Product, Platform teams to ensure that enterprise in-house applications, APIs, AI services, autonomous agents, and MCP-based integrations are designed, built, tested, and operated with effective security controls.

The role is a builder-defender hybrid: review systems, validate security controls, automate repeatable checks, and design and develop internal security tools

What you will be do:

  • Perform security reviews for enterprise in-house applications across architecture, design, code, APIs, cloud services, data flows, and deployment patterns.
  • Embed security into the enterprise Secure SDLC for in-house applications from design and development through build, test, deployment, and runtime operation.
  • Develop agentic AI workflows and tools that automate repeatable AppSec activities such as application intake, evidence collection, control checks, threat-model preparation, finding enrichment, risk summarization, remediation guidance, and ticket/workflow creation.
  • Build secure integrations between AI agents and engineering/security platforms through APIs, webhooks, CI/CD interfaces, and approved tool connectors.
  • Perform other duties as assigned by the direct supervisor.

What we need from you:

  • Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Software or related field.
  • 3+ years of experience in application security or software engineering with meaningful security responsibilities.
  • Strong hands-on software development skills (for example, Python, JavaScript/TypeScript, Go, or similar)
  • Experience working with DevOps workflows, source control, pull requests, build pipelines, artifact repositories, and developer issue-tracking processes.
  • Familiarity with application and AI security guidance such as OWASP Top 10 / API Security Top 10, OWASP ASVS, OWASP AI/LLM guidance, MITRE ATLAS, and secure development practices.

OPSWAT is an equal opportunity employer. We celebrate diversity and are committed to providing an environment where equal employment opportunities are extended to all employees and applicants, free of discrimination and harassment of any type. All employment decisions are based on individual qualifications, job requirements, and business needs without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other category protected by federal, state, or local laws.

Recruiting Agencies: we do not accept unsolicited resumes from third party agencies for any of our open positions. To submit resumes for our jobs, there must be a recruiting contract approved by our legal team and endorsed by both parties. We are currently not accepting additional 3rd party agencies at this time.

OPSWAT

About OPSWAT

OPSWAT protects critical infrastructure. Our goal is to eliminate malware and zero-day attacks. We believe that every file and every device pose a threat. Threats must be addressed at all locations at all times—at entry, at exit, and at rest. Our products focus on threat prevention and process creation for secure data transfer and safe device access. The result is productive systems that minimize risk of compromise. That’s why 98% of U.S. nuclear power facilities trust OPSWAT for cybersecurity and compliance.

OPSWAT. Trust no file. Trust no device.

www.opswat.com

Visit us on Twitter, Facebook, Instagram, and YouTube.

http://www.twitter.com/opswat

http://www.facebook.com/opswat

https://www.instagram.com/opswat

https://www.youtube.com/user/opswat1

Industry
IT & Software
Company Size
1,001-5,000 employees
Headquarters
Tampa, Florida
Year Founded
2002
Social Media