Application Security Engineer

iFAST Global Hub AI Sdn Bhd; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Benefits offered by this job

Employee share options

Insurance coverage

Snacks & beverages

Annual leave 21 days

Job summary

iFAST Global Hub AI Sdn Bhd in Malaysia is seeking a Cyber Security Engineer (Red Team & Penetration Test) to identify vulnerabilities in web, mobile, and API apps. You will collaborate with developers and DevSecOps to fix issues.

You will conduct security assessments, run red team exercises, provide secure design guidance, and help remediate findings while integrating security into the CI/CD pipeline. Ideal candidates have 2–4 years in pen testing or app sec, and certifications such as

Qualifications

• Bachelor’s degree or equivalent in CS or cybersecurity.
• 2–4 years in penetration testing or application security.
• Hands-on with Burp Suite, Metasploit and Nmap.
• Proficient in Python or Java.
• Certifications such as OSCP/OSEP are a plus.

Responsibilities

• Perform security assessments of web, mobile and API applications.
• Plan and run red team exercises within agreed rules of engagement.
• Provide security consulting on secure design, architecture reviews and threat modelling.
• Remediate findings with developers and retest fixes.
• Collaborate with DevOps to build security tooling for CI/CD.

Skills

Penetration testing

Threat modelling

Security assessments

Secure coding practices

Analytical thinking

DevSecOps

Problem solving

Education

Bachelor's degree in computer science or cybersecurity

Tools

Burp Suite

Metasploit

Nmap

Linux

Windows

Job description

Cyber Security Engineer (Red Team & Penetration Test)

iFAST is a fintech wealth management platform headquartered in Singapore, providing a comprehensive range of investment products and services to financial advisory firms, financial institutions, banks, internet companies, multinational companies, as well as retail and high net worth investors in Asia.

Job Summary

We are looking for an application security professional to find vulnerabilities and business logic weaknesses in our business applications. You will work with developers and DevSecOps to get them fixed.

Responsibilities:

Perform security assessments of web, mobile and API applications using threat modelling, code scanning and penetration testing.

Plan and run red team exercises against applications and supporting infrastructure within agreed rules of engagement.

Provide security consulting to development teams on secure design, architecture reviews and threat modelling.

Work with developers to remediate findings, remove false positives from scan reports and retest fixes.

Work with DevOps to build tools and automation that improve security in the CI/CD pipeline.

Develop secure coding standards and train development teams on web and mobile secure coding.

Requirements:

Bachelor’s degree in computer science, cybersecurity or a related field, or equivalent experience.

2 to 4 years of experience in penetration testing, application security or red teaming.

Hands-on with Burp Suite, Metasploit, Nmap and similar tools; strong knowledge of OWASP Top 10 and API security.

Good understanding of Linux, Windows, Active Directory, TCP/IP, cloud and container infrastructure.

Proficient in at least one scripting or programming language (e.g. Python, Java).

Relevant certifications (OSCP, OSEP or similar) are a plus.

Ability to think outside the box and find creative ways to bypass security controls and defenses.

Excellent written and verbal communication skills.

Strong analytical and problem-solving skills.

Why Join Us?

Work on modern AppSec practices instead of traditional “checklist security”

Gain hands‑on exposure to AI‑assisted security tooling and threat intelligence

Collaborate directly with engineering teams on real‑world systems

Build highly transferable skills across security, cloud, DevOps, and AI‑era engineering

Grow your career in one of the fastest‑evolving domains in tech

Perks and Benefits:

Employee Share Options / Performance Shares : The company introduced the Share Options / Performance Shares Plan to recognize employees' contributions and achievements in the growth of the company.

Investment : 0% sales charge for unit trust & 50% staff rebate on front end charges for stocks and ETFs * if you invest through our platform.

Snacks & Beverages : Enjoy a variety of snacks and drinks from vending machines, including fresh‑brewed espresso, Americano, and more from the coffee machine. Additionally, we have a weekly Breakfast Day and Fruits Day!

Relaxation : Access to a relaxation room equipped with massage chairs at all times to help you relieve tiredness and stress.

Yearly Activities : Participation in outdoor activities, celebrations during festive seasons, and more exciting events!

Remuneration Package : Competitive salary packages that are well above market rates for those with the right potential.

Annual Salary Review and Yearly Bonus : Both processes will be conducted depending on the company's performance and individual work performance.

Coverage : Comprehensive insurance along with Medical, Dental & Optical coverage.

Allowances : Monthly sports allowance, Enjoy yearly department gatherings, and welcome lunches for new staffs.

Training : Benefit from free external and internal training providers, ensuring continuous learning and development.

Annual Leave : Entitlement to 21 days of annual leave.

These benefits are designed to enhance your overall well-being and ensure a rewarding working experience with us.