AI-Driven Cloud & App Security Architect

Appspace (Malaysia) Sdn Bhd; Kuala Lumpur; On-site; MYR 180,000 - 420,000; Full time

Job summary

Appspace in Kuala Lumpur seeks a Security Architect with hands-on expertise in AI security, cloud security, and application security. You will lead security testing across AWS, Azure, GCP, and container environments, guiding engineering teams to embed security into SDLC and SSDLC practices.

The role demands strong scripting, red-team experience, and client-facing leadership. You will collaborate with engineering to implement secure configurations, run investigations, and advocate OWASP Top 10

Qualifications

• Bachelor's degree in Computer Science, Cyber Security, Risk Management or related field.
• 10+ years of information security experience including penetration testing, red-team testing, offensive security and exploitation.
• Strong understanding of OWASP Top 10, ISO frameworks and secure software development practices.

Responsibilities

• Lead security transformation initiatives for AI, cloud and application security for enterprise clients.
• Perform penetration tests and red-team assessments across cloud, containers and on-prem environments.
• Develop SSDLC guidelines and embed security into SDLC processes.
• Mentor security engineers and client teams in secure coding and threat modelling.
• Communicate complex security concepts to technical and non-technical stakeholders.

Skills

Penetration testing

Red-team testing

Offensive security

Threat modelling

OWASP Top Ten

Cloud security

Application security

Python scripting

Container security

SSDLC / secure SDLC

Education

Bachelor's degree in Computer Science

Tools

SAST tooling

DAST tooling

SCA tooling

Terraform

Kubernetes

CloudFormation / ARM templates

Job description

Appspace in Kuala Lumpur seeks a Security Architect with hands-on expertise in AI security, cloud security, and application security. You will lead security testing across AWS, Azure, GCP, and container environments, guiding engineering teams to embed security into SDLC and SSDLC practices.

The role demands strong scripting, red-team experience, and client-facing leadership. You will collaborate with engineering to implement secure configurations, run investigations, and advocate OWASP Top 10