Application Software Security

Hexamatics Servvcom Sdn Bhd; Kuala Lumpur; On-site; MYR 90,000 - 150,000; Full time

Job summary

Hexamatics Servvcom Sdn Bhd is seeking a security-focused professional to embed security into the SDLC and DevSecOps pipelines. You will manage application security tooling, perform web and API assessments, and review architectures to mitigate risks.

The role drives secure coding practices and developer security awareness across cross-functional teams. Based in Malaysia, the role collaborates with developers, DevOps, and cloud teams to ensure secure deployments and continuous security

Qualifications

• SDLC and DevSecOps security integration
• Management of SAST/DAST/SCA and secret/container security tools
• Perform application security assessments (web apps and APIs)
• Review architecture/design for security risks and secure design practices
• Establish secure coding standards and developer security awareness programs
• Support secure deployment activities and validate security controls before production

Responsibilities

• Integrate security requirements, controls and testing into the SDLC and DevSecOps pipelines.
• Manage and support application security tools, including SAST, DAST, SCA, secret scanning, and container security scanning solutions.
• Perform application security assessments, including web app and API.
• Review application architecture and design to identify security risks and recommend secure design practices.
• Establish and maintain secure coding standards, guidelines, and developer security awareness programs.
• Support secure application deployment activities and validate security controls before production release.
• Perform vulnerability triage, false-positive validation, and remediation tracking for application security findings.
• Monitor emerging application security threats and recommend improvements to strengthen the organization's application security posture.
• Work closely with developers, DevOps engineers, cloud teams, and project teams throughout the SDLC.

Job description

Embed security into application development and deployment processes while enabling secure software delivery.

Key responsibilities

Integrate security requirements, controls and testing activities into the Software Development Life Cycle (SDLC) and DevSecOps pipelines.

Manage and support application security tools, including SAST, DAST, SCA, secret scanning, and container security scanning solutions.

Perform application security assessments, including web app and API.

Review application architecture and design to identify security risks and recommend secure design practices.

Establish and maintain secure coding standards, guidelines, and developer security awareness programs.

Support secure application deployment activities and validate security controls before production release.

Perform vulnerability triage, false-positive validation, and remediation tracking for application security findings.

Monitor emerging application security threats and recommend improvements to strengthen the organization's application security posture.

Work closely with developers, DevOps engineers, cloud teams, and project teams throughout the SDLC.

Hexamatics is a leading regional provider of Human Resources Outsourcing (PEO and EOR) services. We provide the full suite of professional and comprehensive services through state of the art technology to help companies achieve peak performance with their human capital. Our offices span across Asia, from Singapore to Nepal, with the headquarters situated in Kuala Lumpur, Malaysia. Our clients include leading international and regional corporations in all industries. Through utilising our diverse offices and services, our team continues to successfully deliver projects all over the world.

Hexamatics is a leading regional provider of Human Resources Outsourcing (PEO and EOR) services. We provide the full suite of professional and comprehensive services through state of the art technology to help companies achieve peak performance with their human capital. Our offices span across Asia, from Singapore to Nepal, with the headquarters situated in Kuala Lumpur, Malaysia. Our clients include leading international and regional corporations in all industries. Through utilising our diverse offices and services, our team continues to successfully deliver projects all over the world.