Full Stack Security Engineer

Role overview Split your work between testing the security of web applications and building secure products for client and internal use. You’ll assess systems across a range of industries, explain findings clearly, and use AI tools to support development, vulnerability triage, reconnaissance, and penetration testing. The role calls for end-to-end responsibility, from understanding a problem through implementation or a useful security report.

Responsibilities - Conduct web application penetration tests, code reviews, and architecture assessments. - Investigate vulnerabilities across front ends, APIs, authentication, business logic, data handling, and cloud configuration. - Write audit reports that explain issues and remediation options to technical and non-technical readers. - Use AI-assisted tools to help automate reconnaissance, triage vulnerabilities, draft reports, and support penetration tests. - Build and maintain secure applications with modern web frameworks, owning features from data and API design through deployment and monitoring. - Keep current with common vulnerability guidance and emerging attack patterns, including threats affecting AI systems.

Requirements - Thai nationality; the source states this is required. - Three or more years of experience, with the role listing a range up to eight-plus years. - Full-stack development and web application security skills sufficient to build applications and assess their security. - Experience using AI coding tools in day-to-day engineering work, including reviewing their output. - Ability to communicate security findings and proposed fixes to varied audiences.

Benefits and work setup - Full-time role with remote work available; Bangkok is also listed as a location. - The source describes a small team with engineer ownership and direct access to project decision-makers. - The selection process includes a paid technical exercise and a 90-minute collaborative working session.