Application Security Engineer – SDLC & DevSecOps

Hexamatics Servvcom Sdn Bhd; Kuala Lumpur; Presencial; MYR 90.000 - 150.000; Jornada completa

Descripción de la vacante

Hexamatics Servvcom Sdn Bhd is seeking a security-focused professional to embed security into the SDLC and DevSecOps pipelines. You will manage application security tooling, perform web and API assessments, and review architectures to mitigate risks.

The role drives secure coding practices and developer security awareness across cross-functional teams. Based in Malaysia, the role collaborates with developers, DevOps, and cloud teams to ensure secure deployments and continuous security

Formación

• SDLC and DevSecOps security integration
• Management of SAST/DAST/SCA and secret/container security tools
• Perform application security assessments (web apps and APIs)
• Review architecture/design for security risks and secure design practices
• Establish secure coding standards and developer security awareness programs
• Support secure deployment activities and validate security controls before production

Responsabilidades

• Integrate security requirements, controls and testing into the SDLC and DevSecOps pipelines.
• Manage and support application security tools, including SAST, DAST, SCA, secret scanning, and container security scanning solutions.
• Perform application security assessments, including web app and API.
• Review application architecture and design to identify security risks and recommend secure design practices.
• Establish and maintain secure coding standards, guidelines, and developer security awareness programs.
• Support secure application deployment activities and validate security controls before production release.
• Perform vulnerability triage, false-positive validation, and remediation tracking for application security findings.
• Monitor emerging application security threats and recommend improvements to strengthen the organization's application security posture.
• Work closely with developers, DevOps engineers, cloud teams, and project teams throughout the SDLC.

Descripción del empleo

Hexamatics Servvcom Sdn Bhd is seeking a security-focused professional to embed security into the SDLC and DevSecOps pipelines. You will manage application security tooling, perform web and API assessments, and review architectures to mitigate risks.

The role drives secure coding practices and developer security awareness across cross-functional teams. Based in Malaysia, the role collaborates with developers, DevOps, and cloud teams to ensure secure deployments and continuous security