Application Security Engineer

Emmbr; Kuala Lumpur; Hybrid; MYR 150,000 - 200,000; Full time

Job summary

A global technology firm in Kuala Lumpur is seeking a skilled security professional to embed security into the software development lifecycle. You will work closely with engineering teams to enhance product security by leveraging best practices and leading tools in application security. The ideal candidate has strong experience with tools like Veracode and Snyk, and familiarity with cloud-native environments such as AWS and Kubernetes. Join us to work in a collaborative hybrid environment with a competitive salary and bonus.

Benefits

Competitive salary

Bonus

Hybrid office setting

Qualifications

• Strong experience with application security tools like Veracode and Snyk.
• Familiar with cloud-native environments like AWS and Kubernetes.
• Comfortable interpreting logs and identifying risks.

Responsibilities

• Embed security into the SDLC through code reviews and threat modelling.
• Operate and optimise application security tooling across CI/CD.
• Collaborate with engineering teams to enhance security.

Skills

Application security tools expertise

Knowledge of cloud security

Ability to interpret security logs

Familiarity with security frameworks

Tools

Veracode

Snyk

Checkmarx

Splunk

Datadog

Job description

• Global high growth business, expanding capability in ASIA
• Work with some of the best engineers, permanent full time, hybrid
• Competitive salary + bonus, hybrid office setting

Bring your passion for secure coding and modern DevSecOps practices into a global business where security is built into every stage of development. You'll play a key role in strengthening product security by embedding best practices, guiding developers, and leveraging leading tools across SAST, DAST, IAST, and SCA. This is an opportunity to influence secure design at scale while working hands-on with cutting-edge technology stacks.

About the Role

• Embed security into the SDLC through code reviews, design reviews, and threat modelling.
• Operate and optimise application security tooling (SAST, DAST, IAST, SCA) across CI/CD pipelines.
• Collaborate with engineering teams to drive shift-left security and security champion initiatives.
• Provide expert guidance on secure coding, cloud security, and vulnerability management.
• Contribute to security standards, playbooks, and compliance frameworks.

About You

• Strong experience with application security tools (e.g. Veracode, Snyk, Checkmarx, Burp Suite).
• Familiar with cloud-native environments (AWS, containers, Kubernetes) and infrastructure-as-code.
• Comfortable interpreting logs and identifying risks using platforms like Splunk or Datadog.
• Knowledge of security frameworks (OWASP Top 10, ASVS, MITRE ATT&CK) and regulatory standards.

Be careful - Don’t provide your bank or credit card details when applying for jobs. Don't transfer any money or complete suspicious online surveys. If you see something suspicious, report this job ad.