summary

kuala lumpur, wilayah persekutuan
RM17,000 per year
permanent

specialism
information technology
sub specialism
it & cyber security
reference number
91M0275272_0815760153924607012

speed up the application by sharing your profile

job details

about the company
A global financial technology organisation that provides secure and resilient financial messaging infrastructure used by banks and financial institutions worldwide. The organisation operates in a highly regulated, technology-driven environment where security, reliability and operational resilience are critical to its services. ...

about the job

We are looking for a Senior Application Security Engineer to strengthen application and software security across the organisation.

This role will work closely with Agile, Software Engineering and DevSecOps teams to embed security throughout the Software Development Lifecycle (SDLC) — from application architecture and design through development, testing and operations.

Key responsibilities include:

Partner with engineering and DevSecOps teams to assess application and architecture security.
Define security requirements based on business needs, technology architecture, threats and risks.
Conduct threat modelling, security risk assessments and architecture reviews.
Promote secure-by-design and secure coding practices across development teams.
Integrate and manage application security controls within CI/CD pipelines.
Work with SAST, DAST, SCA, API security/testing and container security capabilities.
Identify application vulnerabilities, assess business impact and recommend appropriate remediation.
Develop and maintain application security standards, guidelines and processes.
Research emerging threats, vulnerabilities and security best practices and translate them into practical security improvements.
Support cloud-native, containerised and modern application environments.
Coach and advise development teams to build a stronger security culture.
Continuously improve application security processes, automation and security testing capabilities.

Key requirements:

Strong experience in Application Security / Product Security / Security Engineering.
Hands-on experience with Security Architecture and Threat Modelling.
Strong understanding of OWASP Top 10, secure coding and application vulnerabilities.
Experience with SAST, DAST, SCA, API security/testing and/or container security.
Good understanding of Agile, DevSecOps, CI/CD and Secure SDLC.
Experience conducting security risk assessments and translating risks into practical security controls.
Exposure to cloud-native technologies, containers and modern application architectures.
Strong analytical, communication and stakeholder management skills.

This is not a pure penetration testing role. The focus is on embedding security into application architecture, development and the overall SDLC.

about the manager/team

You will work within a global cybersecurity and technology environment, partnering closely with software engineering, architecture, DevSecOps and other technology stakeholders across the organisation.

The team operates as a security partner to engineering teams, providing technical guidance and helping teams identify and address security risks early in the development lifecycle.

This is a collaborative role with strong exposure to global teams, modern application technologies and large-scale financial technology environments, with opportunities to influence how application security is implemented across the organisation.

about the job

We are looking for a Senior Application Security Engineer to strengthen application and software security across the organisation.

Key responsibilities include:

Partner with engineering and DevSecOps teams to assess application and architecture security.
Define security requirements based on business needs, technology architecture, threats and risks.
Conduct threat modelling, security risk assessments and architecture reviews.
Promote secure-by-design and secure coding practices across development teams.
Integrate and manage application security controls within CI/CD pipelines.
Work with SAST, DAST, SCA, API security/testing and container security capabilities.
Identify application vulnerabilities, assess business impact and recommend appropriate remediation.
Develop and maintain application security standards, guidelines and processes.
Research emerging threats, vulnerabilities and security best practices and translate them into practical security improvements.
Support cloud-native, containerised and modern application environments.
Coach and advise development teams to build a stronger security culture.
Continuously improve application security processes, automation and security testing capabilities.

Key requirements:

Strong experience in Application Security / Product Security / Security Engineering.
Hands-on experience with Security Architecture and Threat Modelling.
Strong understanding of OWASP Top 10, secure coding and application vulnerabilities.
Experience with SAST, DAST, SCA, API security/testing and/or container security.
Good understanding of Agile, DevSecOps, CI/CD and Secure SDLC.
Experience conducting security risk assessments and translating risks into practical security controls.
Exposure to cloud-native technologies, containers and modern application architectures.
Strong analytical, communication and stakeholder management skills.

This is not a pure penetration testing role. The focus is on embedding security into application architecture, development and the overall SDLC.

about the manager/team

The team operates as a security partner to engineering teams, providing technical guidance and helping teams identify and address security risks early in the development lifecycle.

skills
Defensive / AppSec Architect
qualifications
Strong understanding in application security, Agile and DevSecOps
SAST, DAST, SCA, API testing and/or containers vulnerability management
education
Bachelor Degree

share this job.

apply with randstad.
Applying with us is easy. We will review your application and see if you are a good fit for the job and the company.
we’ll give you a call.
Our consultant will call you to discuss your application and further career aspirations if you're suitable for a role.
getting you registered.
If you’ve never worked with us before, we’ll need some basic additional pieces of information to confirm your eligibility to work in Malaysia.
compliance check.
Next, we just need to verify a few things - we’ll make the relevant compliance checks and keep you posted.
reference and background check.
As part of the process in ensuring you’re perfect for the role, we’ll make contact with any relevant references you’ve provided.
the perfect job for you.
Our expert team will either arrange an interview for the role you’ve applied for, or if they believe there’s a better opportunity, they’ll suggest alternative options too.
the interview.
If a job which you have applied for requires an interview, we will ensure you are fully prepared and know exactly what to expect - good luck!
start your new job.
Congratulations, you’re ready to begin your new job. The team will ensure that you’re fully prepared for your first day.

wen xin yap

+60 11 2336 1038

senior application security specialist
- kuala lumpur, wilayah persekutuan
- permanent
about the company A global financial messaging leader providing secure, reliable network infrastructure and communication services across the banking and financial ecosystem. The organization operates on a hybrid working model , driving high-security standards across international cross-functional teams. about the jobAs a Senior Application Security Specialist (Defensive / AppSec Architect), you will focus strictly on defensive application security, threat
posted 29 september 2026
about the company A global financial messaging leader providing secure, reliable network infrastructure and communication services across the banking and financial ecosystem. The organization operates on a hybrid working model , driving high-security standards across international cross-functional teams. about the jobAs a Senior Application Security Specialist (Defensive / AppSec Architect), you will focus strictly on defensive application security, threat
show job details
senior java developer
- kuala lumpur, wilayah persekutuan
- permanent
- RM9,000 - RM12,000 per year
about the companyInnovating in the manufacturing tech space to modernize and optimize industrial operations.Technology-driven organization based in Malaysia dedicated to building scalable enterprise solutions.Fast-paced and dynamic tech environment focused on continuous development and technical growth.about the jobFocuses on designing, building, and maintaining a high-performance distributed ERP system tailored for manufacturing.Responsible for troublesho
posted 29 september 2026
about the companyInnovating in the manufacturing tech space to modernize and optimize industrial operations.Technology-driven organization based in Malaysia dedicated to building scalable enterprise solutions.Fast-paced and dynamic tech environment focused on continuous development and technical growth.about the jobFocuses on designing, building, and maintaining a high-performance distributed ERP system tailored for manufacturing.Responsible for troublesho
show job details
ai engineer
- kuala lumpur, wilayah persekutuan
- permanent
About the CompanyOur client is an innovative powerhouse operating at the high-growth intersection of FinTech and Gaming. Known for high-concurrency environments, cutting-edge technology adoption, and a fast-paced development culture, they build scalable systems that serve millions of users globally. They are heavily investing in artificial intelligence to revolutionize internal operations, customer service, and product experiences.About the JobAs an AI Eng
posted 25 september 2026
About the CompanyOur client is an innovative powerhouse operating at the high-growth intersection of FinTech and Gaming. Known for high-concurrency environments, cutting-edge technology adoption, and a fast-paced development culture, they build scalable systems that serve millions of users globally. They are heavily investing in artificial intelligence to revolutionize internal operations, customer service, and product experiences.About the JobAs an AI Eng
show job details

Thank you for subscribing to your personalised job alerts.

You need to enable JavaScript to run this app.

senior application security engineer (appsec).

job details

skills

qualifications

education

share this job.

the application process.

apply with randstad.

we’ll give you a call.

getting you registered.

compliance check.

reference and background check.

the perfect job for you.

the interview.

start your new job.

get in touch

wen xin yap

related jobs.

senior application security specialist

senior java developer

ai engineer

let similar jobs come to you