Application Security Engineer – Vulnerability & AppSec Expert

PURESOFTWARE SDN. BHD.; Kuala Lumpur; On-site; MYR 180,000 - 240,000; Full time

Job summary

PureSoftware SDN. BHD. is seeking an experienced cybersecurity professional to lead vulnerability management and AppSec efforts. The ideal candidate will operate across global/regional environments, applying NIST/ISO27001 frameworks and cloud security best practices across AWS, Azure and GCP.

Responsibilities include evaluating vulnerability findings with SAST/DAST/SCA tools, ass
essing risk, and developing automation to streamline triage. Advanced certifications are a plus.

Qualifications

• Bachelor’s degree in Information Security, Computing Engineering or equivalent.
• 4+ years in cybersecurity, preferably with a focus on vulnerability management, AppSec, or vulnerability operations team.
• Global/regional exposure desirable; bonus for financial services and/or tech industry experience.
• Knowledge of security frameworks such as NIST and ISO 27001.
• Experience with multi-cloud environments (AWS, Azure, GCP) and related security implications.
• Experience with vulnerability tools including SAST, DAST, SCA and container scanners.
• Familiarity with triage vulnerability operations and risk scoring methodologies.
• Experience building automation scripts/queries/workflows to reduce triage time.
• Preferred information security certifications (Security+, OSCP, CISSP).

Skills

Cybersecurity experience

Vulnerability management

AppSec

Security frameworks (NIST, ISO 27001)

Cloud security (multi-cloud)

Vulnerability tools (SAST, DAST, SCA,容

Education

Bachelor’s degree in Information Security or computing

Tools

Vulnerability tools

SAST

DAST

SCA

Container scanners

Job description

PureSoftware SDN. BHD. is seeking an experienced cybersecurity professional to lead vulnerability management and AppSec efforts. The ideal candidate will operate across global/regional environments, applying NIST/ISO27001 frameworks and cloud security best practices across AWS, Azure and GCP.

Responsibilities include evaluating vulnerability findings with SAST/DAST/SCA tools, ass
essing risk, and developing automation to streamline triage. Advanced certifications are a plus.