VinSOC Joint Stock Company is Vingroup's core cybersecurity entity, responsible for implementing, monitoring, and operating security systems across the Group's technology and digital ecosystem.
As Vingroup's digital shield, VinSOC researches emerging cyber threats, applies advanced security technologies, and strengthens threat detection, incident response, and cyber defense capabilities.
VinSOC is also developing AI-powered security solutions to automate security operations and secure modern AI systems, including LLM applications, AI agents, RAG pipelines, model infrastructure, and the AI supply chain.
The ideal candidate understands both traditional cybersecurity and modern AI systems. They can review AI architectures, identify practical risks, design security controls, and work with engineering, SOC, and governance teams to operationalize AI security at enterprise scale.
1. Job Responsibilities
- Conduct security assessments for AI/ML systems, LLM applications, AI agents, RAG pipelines, inference services, and AI-powered security products.
- Review agentic AI architectures, including Agent IAM, LLM gateways, MCP/tool integrations, delegated permissions, sub-agents, and downstream system access.
- Identify and mitigate AI security risks such as prompt injection, tool misuse, identity misuse, data leakage, model abuse, insecure retrieval, and unsafe delegation.
- Design security controls for agent identity, delegation chains, tool access, approval workflows, audit logging, and policy enforcement.
- Assess AI supply chain risks and maintain AI SBOM / AI BOM practices for models, datasets, tools, prompts, dependencies, APIs, and service providers.
- Perform AI security testing using threat modeling, SAST, DAST, API testing, adversarial testing, prompt testing, and abuse-case testing.
- Monitor AI-related logs and collaborate with SOC, Security Triage, Incident Response, engineering, governance, and compliance teams to investigate incidents and operationalize AI security.
2. Job Requirements
- Bachelor's or Master's degree in Computer Science, Cybersecurity, Engineering, Data Science, AI/ML, or a related field.
- At least 2 years of experience in cybersecurity, security engineering, application security, cloud security, SOC, security assessment, or related technical security roles.
- Exposure to AI/ML security, LLM applications, RAG systems, AI agents, model serving, AI-powered security products, or similar AI-related systems.
- Understanding of application security, API security, IAM, network security, cloud security, logging, incident response, vulnerability management, or secure architecture.
- Familiarity with AI and LLM risks such as prompt injection, jailbreaks, data poisoning, model extraction, insecure tool use, hallucination risk, data leakage, or unsafe agent behavior.
- Experience with SAST, DAST, API testing, threat modeling, architecture review, secure code review, vulnerability triage, AI security frameworks, or security testing.
3. Preferred Qualifications
- Hands-on experience securing LLM applications, AI agents, RAG pipelines, MCP tools, LLM gateways, or AI orchestration platforms.
- Experience with AI infrastructure such as vLLM, Triton, TGI, Kubernetes, GPU workloads, vector databases, or model registries.
- Experience with AI SBOM / AI BOM, software supply chain security, model provenance, or third-party AI risk assessment.
- Experience working with SOC teams on detection engineering, log analysis, alert triage, incident response, or threat hunting.
- Preferred certifications include CISSP, CISM, ISO 27001 Lead Auditor, ISO 27001 Internal Auditor, GIAC, cloud security certifications, or equivalent practical experience.
