Specialist, Application Security
Save this job and keep your search organized
Create a free account to save jobs, create alerts and return to this listing from your dashboard.
By continuing, you agree to our Terms & Privacy Policy.
* Responsible to plan and perform regular security test, monitoring and assessment on both frontend and backend application (mobile apps)
* Responsible to plan and perform regular review of backend API/webservices
* Responsible to perform regular vulnerability assessment across all enterprise IT assets
* Responsible to conduct host configuration review on existing operating systems (servers/network devices)
* Responsible to articulate and report discovered vulnerabilities in concise manners
* Responsible to work closely with respective stakeholders in identifying the appropriate remediation.
* Responsible to engage third party vendor to perform regular application penetration test and facilitate security assessment
* Working closely with Risk team to ensure regular source code security review are performed and reported
* Responsible to follow up any application vulnerabilities until closing. Working closely with development and QA team to ensure vulnerabilities are closed in time
* To plan and perform out-of-the-box security assessment against enterprise infrastructure to identify existing security gaps#### Requirements
* Bachelor’s degree in Computer Science, Information Security, or related technical field.
* Minimum 5–7 years of hands-on experience in red teaming, penetration testing, or offensive security roles.
* Strong technical expertise in:
* Web and mobile app penetration testing (frontend/backend)
* API and web service security testing
* Mobile app (Android/iOS) reverse engineering and testing tools (e.g., Frida, Burp, MobSF)
* OS and network-level assessment (Windows, Linux, network devices)
* Secure SDLC, DevSecOps integration, and code scanning familiarity
* Excellent scripting and automation skills (e.g., Python, Bash, PowerShell).
* Prior experience in writing custom tools, exploits, or testing modules.
* Strong reverse engineering skills for binaries or mobile apps.
* Experience with CTF competitions, bug bounty, exploit development or security research publication is a plus.
* Must be able to think out of the box, emulate real-world attacks, and identify unknown unknowns.
* Offensive Security Certified Professional (OSCP)
* OffSec OSWE, OSEP, or OSED
* GIAC GPEN, GWAPT, GMOB, GXPN
* Mobile Application Security Certification
* Forensic related certification will be a plus.
-
Kuala Lumpur, Kuala Lumpur, Malaysia DKSH Full-time MYR 180,000 - MYR 230,000 ContractAbout The Role As an Application Security Engineer, you play a critical role in safeguarding DKSH's digital landscape by driving application security assurance across the full software development lifecycle. Your expertise in penetration testing, vulnerability management, and Application Security (AppSec) governance ensures that internal, third-party, and...
-
DevSecOps Engineer
4 days ago
Kuala Lumpur, Kuala Lumpur, Malaysia Prudential Services Asia Full-timePrudential’s purpose is to be partners for every life and protectors for every future. Our purpose encourages everything we do by creating a culture in which diversity is celebrated and inclusion assured, for our people, customers, and partners. We provide a platform for our people to do their best work and make an impact to the business, and we support...
-
DevSecOps Engineer
4 days ago
Kuala Lumpur, Kuala Lumpur, Malaysia Prudential plc Full-timePrudential’s purpose is to be partners for every life and protectors for every future. Our purpose encourages everything we do by creating a culture in which diversity is celebrated and inclusion assured, for our people, customers, and partners. We provide a platform for our people to do their best work and make an impact to the business, and we support...
-
Senior Application Security Specialist
4 days ago
Kuala Lumpur, Kuala Lumpur, Malaysia Swift Software Full-time MYR 90,000 - MYR 150,000 ContractAbout SwiftSwift is a global provider of secure financial messaging services, delivering trusted value transfer across borders.ResponsibilitiesServe as the trusted partner of Agile and DevSecOps teams, supporting and collaborating to secure their applications from design to deployment.Provide security requirements aligned with policies and standards,...
-
Senior Application Security Specialist
4 days ago
Kuala Lumpur, Kuala Lumpur, Malaysia Swift Full-time MYR 66,960 - MYR 111,600 ContractAbout Us We’re the world’s leading provider of secure financial messaging services, headquartered in Belgium. We are the way the world moves value – across borders, through cities and overseas. No other organisation can address the scale, precision, pace and trust that this demands, and we’re proud to support the global economy. We were established...
-
Senior Application Security Engineer
1 day ago
Kuala Lumpur, Kuala Lumpur, Malaysia Bybit Full-time MYR 180,000 - MYR 240,000 ContractEstablished in 2018, Bybit is one of the world’s leading cryptocurrency exchanges and digital financial platforms, serving over 80 million users across more than 200 countries and regions. Powered by world-class technology and a user-first mindset, Bybit delivers a seamless ecosystem across trading, payments, wealth management, custody, institutional...
-
Application IT Support Specialist
1 day ago
Kuala Lumpur, Kuala Lumpur, Malaysia TNG Digital Full-time MYR 22,000 - MYR 38,000 ContractTNG Digital Remittance is seeking an experienced Application Support professional to provide first and second-level assistance, diagnose complex issues, and coordinate with cross-functional teams. The role includes monitoring performance, applying updates, and contributing to security incident response.Candidates should have at least 2 years in technical...
-
Information and Application Security Analyst
2 days ago
Kuala Lumpur, Kuala Lumpur, Malaysia Turnkey Consulting Malaysia Sdn Bhd Full-time MYR 60,000 - MYR 90,000 ContractTurnkey provides consulting and managed services in the areas of Identity and Access Management, Risk and Controls Management and Application/Cyber Security for corporations predominantly running SAP software. We deliver consulting and application support services within this specialised niche to customers regardless of their size or industry, helping them...
-
Security Architect/ Penetration Tester
1 day ago
Kuala Lumpur, Kuala Lumpur, Malaysia Appspace (Malaysia) Sdn Bhd Full-time MYR 180,000 - MYR 360,000 ContractSecurity Architect/ Penetration Tester (Cloud & Application Security)We're looking for a Security Architect with a passion for securing Artificial Intelligence platforms, AI-driven code analysis, MCP security testing, promoting OWASP Top-Ten testing standards and supporting the Security Engineering program through the Software Application Maturity Model....
-
Corporate and Physical Security, Specialist
3 days ago
Kuala Lumpur, Kuala Lumpur, Malaysia AIA Malaysia Full-timeStart building a career with purpose. At AIA, your perspective, curiosity and ideas can contribute to our Purpose of helping millions of people live Healthier, Longer, Better Lives. Across our diverse markets, you will learn through meaningful work, collaborate with experienced colleagues and build practical skills as you turn fresh ideas into positive...
