Application Security Engineer

PURESOFTWARE SDN. BHD.; Kuala Lumpur; On-site; MYR 180,000 - 240,000; Full time

Job summary

PureSoftware SDN. BHD. is seeking an experienced cybersecurity professional to lead vulnerability management and AppSec efforts. The ideal candidate will operate across global/regional environments, applying NIST/ISO27001 frameworks and cloud security best practices across AWS, Azure and GCP.

Responsibilities include evaluating vulnerability findings with SAST/DAST/SCA tools, ass
essing risk, and developing automation to streamline triage. Advanced certifications are a plus.

Qualifications

• Bachelor’s degree in Information Security, Computing Engineering or equivalent.
• 4+ years in cybersecurity, preferably with a focus on vulnerability management, AppSec, or vulnerability operations team.
• Global/regional exposure desirable; bonus for financial services and/or tech industry experience.
• Knowledge of security frameworks such as NIST and ISO 27001.
• Experience with multi-cloud environments (AWS, Azure, GCP) and related security implications.
• Experience with vulnerability tools including SAST, DAST, SCA and container scanners.
• Familiarity with triage vulnerability operations and risk scoring methodologies.
• Experience building automation scripts/queries/workflows to reduce triage time.
• Preferred information security certifications (Security+, OSCP, CISSP).

Skills

Cybersecurity experience

Vulnerability management

AppSec

Security frameworks (NIST, ISO 27001)

Cloud security (multi-cloud)

Vulnerability tools (SAST, DAST, SCA,容

Education

Bachelor’s degree in Information Security or computing

Tools

Vulnerability tools

SAST

DAST

SCA

Container scanners

Job description

• Bachelor’s degree in Information Security, Computing Engineering or equivalent.
• 4+ years in cybersecurity, preferably with a focus on vulnerability management, AppSec, or vulnerability operations team.
• Prior experience in working in a global/regional exposure is desirable, with prior experience in financial service and/or tech industry is a bonus.
• Have deep knowledge on security frameworks, NIST, ISO 27001.
• Experience in multi-cloud and enterprise-scale environments, Understanding of cloud environments (AWS, Azure, GCP) and their security implications.
• Experience with Vulnerability Tools, SAST, DAST, SCA, container scanners.
• Familiarity in the triage vulnerability operations and vulnerability risk scoring methodologies for identified application security findings/vulnerabilities.
• Experience in or aptitude for building automation scripts, queries or workflows to reduce triage
• Relevant Information Security certification(s) preferred, such as Security+, OSCP, CISSP, are advantageous.

PureSoftware partners with global organizations across different focused verticals, including Financial Services, Life Sciences & Healthcare, Telecom & Semiconductors, Retail & Logistics, and Entertainment. We deliver services and solutions by leveraging our deep domain capabilities, and experience in Digital Technologies, Product Engineering, and Infrastructure Services.

PureSoftware is one of the fastest-growing software products and services companies that delivers a differentiated customer experience, accelerates cycle times, and helps customers achieve business outcomes through the adoption of new-age digital technologies and integrating them with their existing systems.

PureSoftware partners with global organizations across different focused verticals, including Financial Services, Life Sciences & Healthcare, Telecom & Semiconductors, Retail & Logistics, and Entertainment. We deliver services and solutions by leveraging our deep domain capabilities, and experience in Digital Technologies, Product Engineering, and Infrastructure Services.

PureSoftware is one of the fastest-growing software products and services companies that delivers a differentiated customer experience, accelerates cycle times, and helps customers achieve business outcomes through the adoption of new-age digital technologies and integrating them with their existing systems.