JobCubby JobCubby
Sign up
MindMerge Consulting

Senior Executive Engineer Application Security

MindMerge Consulting Petaling Jaya, Selangor, Malaysia

Staffing and Recruiting · 2-10 employees

17 h ago
security Senior (5-10 yrs) Full-time Malaysia
Create a free account to apply — email only, no card. You can also save this posting or score it against your profile with AI.

Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.

About the role

The role involves integrating security controls into the SDLC and DevSecOps pipelines while managing application security tools. You will also perform security assessments, review architecture, and maintain secure coding standards across development teams.

What they look for

Application Security DevSecOps SDLC SAST DAST SCA Secret Scanning Container Security Web Application Security API Security Secure Coding Vulnerability Triage Burp Suite OWASP

Requirements

Candidates should have 3 to 10 years of relevant working experience in application security. Proficiency in security tools such as SAST, DAST, SCA, and Burp Suite is required.

Full description

Our client is a well known leading IT provider in Malaysia and currently looking for a Senior Executive Engineer Application Security.

Role Overview: Embed security into application development and deployment processes while enabling secure software delivery.

Key Responsibilities

  • Integrate security requirements, controls and testing

activities into the Software Development Life Cycle (SDLC) and DevSecOps pipelines.

  • Manage and support application security tools, including SAST,

DAST, SCA, secret scanning, and container security scanning solutions.

  • Perform application security assessments, including web app and

API.

  • Review application architecture and design to identify security

risks and recommend secure design practices.

  • Establish and maintain secure coding standards, guidelines, and

developer security awareness programs.

  • Support secure application deployment activities and validate

security controls before production release.

  • Perform vulnerability triage, false-positive validation, and

remediation tracking for application security findings.

  • Monitor emerging application security threats and recommend

improvements to strengthen the organization's application security posture.

  • Work closely with developers, DevOps engineers, cloud teams,

and project teams throughout the SDLC.

Requirements

  • Working Experience: 3-10 years
  • Skills / Tools: OWASP, SAST, DAST, SCA,

Burp Suite, etc.

Similar roles