Application Security Engineer

Puresoftware; Kuala Lumpur; On-site; MYR 90,000 - 180,000; Full time

Job summary

Jora Malaysia is seeking a seasoned cybersecurity professional with at least four years of hands-on experience in vulnerability management, AppSec, or vulnerability operations. The role requires strong knowledge of security frameworks (NIST, ISO 27001) and multi-cloud security considerations across AWS, Azure, and GCP.

Ideal candidates will have experience with vulnerability scanning tools (SAST/DAST/SCA) and container security.

Qualifications

• Bachelor’s degree in Information Security, Computing Engineering or equivalent.
• 4+ years in cybersecurity, preferably with a focus on vulnerability management, AppSec, or vulnerability operations.
• Experience with security frameworks such as NIST and ISO 27001.
• Experience in multi-cloud environments (AWS/Azure/GCP) and their security implications.
• Experience with vulnerability tools including SAST, DAST, SCA, and container scanners.
• Familiarity with vulnerability triage and risk scoring methodologies for findings.

Skills

Cybersecurity

Vulnerability management

AppSec

Vulnerability operations

Cloud security

Security frameworks

SAST

DAST

SCA

Container scanners

Automation scripting

Vulnerability risk scoring

Education

Bachelor’s degree in Information Security/Computing Engineering or equivalent

Tools

SAST tools

DAST tools

SCA tools

Container scanners

Job description

Jora Malaysia will close on 9th September 2026. Thank you for being with us, we are cheering you on as you continue your career journey.

Bachelor’s degree in Information Security, Computing Engineering or equivalent.

• 4+ years in cybersecurity, preferably with a focus on vulnerability management, AppSec, or vulnerability operations team.
• Prior experience in working in a global/regional exposure is desirable, with prior experience in financial service and/or tech industry is a bonus.
• Have deep knowledge on security frameworks, NIST, ISO 27001.
• Experience in multi-cloud and enterprise-scale environments, Understanding of cloud environments (AWS, Azure, GCP) and their security implications.
• Experience with Vulnerability Tools, SAST, DAST, SCA, container scanners.
• Familiarity in the triage vulnerability operations and vulnerability risk scoring methodologies for identified application security findings/vulnerabilities.
• Experience in or aptitude for building automation scripts, queries or workflows to reduce triage
• Relevant Information Security certification(s) preferred, such as Security+, OSCP, CISSP, are