Full Stack Security Engineer

VRG Industries; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Remote work available

Job summary

VRG Industries seeks a security-focused engineer to test web applications and build secure products for client and internal use. You will assess systems, explain findings clearly, and leverage AI tools to support development, vulnerability triage, reconnaissance, and testing.

You'll own end-to-end responsibility from problem understanding through implementation or a security report, contributing to robust, secure software across industries.

Qualifications

• Three or more years of hands-on web security and development work.
• Ability to build secure applications and assess their security.
• Experience using AI coding tools in daily engineering tasks.
• Ability to clearly explain findings and remediation options to diverse audiences.

Responsibilities

• Conduct web application penetration tests, code reviews, and architecture assessments.
• Investigate vulnerabilities across front ends, APIs, authentication, and data handling.
• Write audit reports explaining issues and remediation options for technical and non-technical readers.
• Use AI-assisted tools to automate reconnaissance, triage vulnerabilities, and support tests.
• Build and maintain secure applications with modern web frameworks from design to deployment and monitoring.
• Stay current with common vulnerability guidance and emerging attack patterns, including AI threats.

Skills

Full-stack development

Web application security

AI coding tools experience

Effective security communication

Tools

AI coding tools

Job description

Role overview

Split your work between testing the security of web applications and building secure products for client and internal use. You'll assess systems across a range of industries, explain findings clearly, and use AI tools to support development, vulnerability triage, reconnaissance, and penetration testing. The role calls for end-to-end responsibility, from understanding a problem through implementation or a useful security report.

Responsibilities

• Conduct web application penetration tests, code reviews, and architecture assessments.
• Investigate vulnerabilities across front ends, APIs, authentication, business logic, data handling, and cloud configuration.
• Write audit reports that explain issues and remediation options to technical and non-technical readers.
• Use AI-assisted tools to help automate reconnaissance, triage vulnerabilities, draft reports, and support penetration tests.
• Build and maintain secure applications with modern web frameworks, owning features from data and API design through deployment and monitoring.
• Keep current with common vulnerability guidance and emerging attack patterns, including threats affecting AI systems.

Requirements

• Thai nationality; the source states this is required.
• Three or more years of experience, with the role listing a range up to eight-plus years.
• Full-stack development and web application security skills sufficient to build applications and assess their security.
• Experience using AI coding tools in day-to-day engineering work, including reviewing their output.
• Ability to communicate security findings and proposed fixes to varied audiences.

Benefits and work setup

• Full-time role with remote work available; Bangkok is also listed as a location.
• The source describes a small team with engineer ownership and direct access to project decision-makers.
• The selection process includes a paid technical exercise and a 90-minute collaborative working session.