Employment Type: Full-time, Permanent
Location: Vietnam
Start Date: Immediate or Short Notice Preferred
Experience Required: 3–5 years
Department: Technology / AI Development / Engineering
ROLE OVERVIEW
We are looking for a full-time AI DevSec Developer to join our technology team on a permanent basis. This role combines hands-on AI/ML development, MERN Stack / JavaScript development, and practical knowledge of DevSecOps, application security, CI/CD pipelines, and secure software development practices.
The successful candidate will be responsible for building AI-powered applications, automation tools, RAG-based solutions, and secure web platforms. The role requires strong technical implementation ability, security awareness, and the ability to work closely with business, product, and technical teams.
The AI development scope is based on the requirement for MERN Stack, JavaScript, RAG models, Claude MCP Protocol, AI workflows, and LLM integration. The DevSecOps scope is adapted from the AppSec requirements covering SAST, DAST, SCA, CI/CD pipeline integration, secure SDLC, OWASP Top 10, and secure developer workflows.
KEY RESPONSIBILITIES
AI & Machine Learning Development
- Design, develop, and implement AI-powered applications and features.
- Build and optimize RAG models using embeddings, vector databases, and LLM workflows.
- Work with LLMs such as Claude, OpenAI, Gemini, or similar AI models.
- Integrate AI models into web applications, internal tools, and business automation workflows.
- Develop AI agents and AI-assisted workflows where required.
- Work with structured and unstructured data for AI processing, retrieval, and automation.
- Support prompt engineering, model testing, and AI output evaluation.
Claude MCP Protocol & AI Agent Integration
- Build or integrate solutions using Claude MCP Protocol.
- Connect AI systems with external tools, databases, APIs, and business applications.
- Support AI tool-calling, context management, and agent workflow development.
- Troubleshoot AI integration issues and improve workflow reliability.
- Document MCP connections, API usage, and AI workflow architecture.
Full-Stack Development
- Develop and maintain web applications using MongoDB, Express.js, React.js, and Node.js.
- Build backend APIs and frontend interfaces for AI-powered platforms.
- Work with JavaScript and TypeScript where required.
- Integrate third-party APIs, AI services, authentication systems, and databases.
- Ensure application performance, scalability, maintainability, and code quality.
- Participate in system design, testing, debugging, deployment, and documentation.
DevSecOps & Application Security
- Support secure software development across the full project lifecycle.
- Integrate security checks into development and deployment pipelines.
- Work with CI/CD workflows to support secure and reliable deployment.
- Assist in implementing or using tools related to SAST, DAST, SCA, and secure code review.
- Identify and help remediate common security issues based on OWASP Top 10 and common vulnerability classes.
- Support secure API development, access control, authentication, and data handling.
- Work with Docker, cloud deployment environments, and DevSecOps tools where required.
- Ensure AI applications are developed with security, privacy, and compliance considerations.
Technical Collaboration & Documentation
- Work closely with project managers, product owners, business teams, and other developers.
- Translate business requirements into technical solutions.
- Prepare technical documentation for AI model integration, APIs, system workflows, and deployment processes.
- Support continuous improvement of AI systems, application security, and development processes.
- Contribute to long-term product development and technical architecture.
Requirements
- Minimum 3–5 years of working experience in software development, AI development, DevSecOps, application security, or related technical roles.
- Strong experience with JavaScript and the MERN Stack.
- Hands-on experience with Node.js, React.js, MongoDB, and Express.js.
- Experience building or integrating AI/ML applications.
- Practical experience with RAG models, embeddings, vector databases, and LLM workflows.
- Experience with Claude MCP Protocol is highly preferred.
- Familiarity with APIs, webhooks, databases, authentication, and cloud-based deployment.
- Understanding of secure software development practices and DevSecOps workflows.
- Familiarity with SAST, DAST, SCA, secure SDLC, OWASP Top 10, and secure code review.
- Experience working with CI/CD pipelines and modern software delivery workflows.
- Strong debugging, problem-solving, documentation, and communication skills.
- Able to work independently and manage technical tasks responsibly.
- Able to start immediately or within short notice is preferred.
Preferred Skills
- Experience with LangChain, LlamaIndex, Pinecone, ChromaDB, Weaviate, Supabase Vector, or similar tools.
- Experience working with Claude, OpenAI, Gemini, or other LLM APIs.
- Experience in AI agent development and workflow automation.
- Experience with cloud platforms such as AWS, Google Cloud, Azure, or Vercel.
- Familiarity with Docker, Kubernetes, GitHub, CI/CD, and deployment pipelines.
- Experience with DevSecOps or AppSec tools for vulnerability scanning, dependency checks, and secure deployment.
- Familiarity with REST APIs, RBAC systems, multi-tenancy, and secure access controls.
- Experience with automation tools such as n8n, Make, Zapier, or similar platforms.
- Understanding of prompt engineering and AI evaluation methods.
- Familiarity with Agile/Scrum working environments.
Candidate Profile
The ideal candidate should be:
- Technically hands-on and implementation-focused.
- Strong in both backend and frontend development.
- Comfortable building AI applications from concept to deployment.
- Security-conscious when developing applications and AI workflows.
- Familiar with secure coding, CI/CD pipelines, and cloud deployment practices.
- Interested in AI applications, automation, cybersecurity, and business process improvement.
- Able to work in a fast-paced technology environment.
- Able to communicate clearly with both technical and non-technical stakeholders.
- Looking for a long-term full-time role with growth opportunities.
