Full-Stack Security Engineer — Vulnerability Remediation

Carsome; Selangor; On-site; MYR 180,000 - 240,000; Full time

Benefits offered by this job

Dental insurance

Health insurance

Maternity leave

Opportunities for promotion

Parental leave

Professional development

Job summary

Jora Malaysia is seeking a senior software engineer with 5+ years of fullstack experience to lead vulnerability remediation across Web and API surfaces. You will read reviews from vulnerability scans, triage findings, and ship code fixes directly in core codebases.

Responsibilities include coordinating with DevOps and security teams, maintaining remediation dashboards, and contributing to secure development practices. Familiarity with bug bounty processes is valued.

Qualifications

• 5+ years of software engineering experience with strong fullstack skills across backend and frontend.
• Solid understanding of web and API vulnerability classes (OWASP Top 10) and how to fix them in code.
• Comfortable working from vulnerability scan reports, pentest reports, and bug bounty submissions to root-cause issues.
• Familiarity with CI/CD pipelines and resolving findings from embedded SAST/SCA/DAST tooling.
• Experience with bug bounty programs and triaging external researcher submissions is a bonus.
• Familiarity with Kubernetes and containerized app environments is a bonus.

Responsibilities

• Own end-to-end remediation of vulnerabilities identified through Web, API, Bug Bounty submissions, and external penetration tests.
• Write and ship code-level fixes for application vulnerabilities directly in codebases (GitHub/GitLab/Bitbucket).
• Triage findings from security tools to validate true positives and prioritize by risk.
• Work with development teams to remediate findings that require architecture changes and provide secure coding guidance.
• Maintain sprint-based remediation tracking and burn-down reporting for vulnerability backlogs.
• Fix vulnerabilities surfaced by security tooling embedded in CI/CD pipelines to keep the pipeline green.
• Build lightweight internal tooling/scripts to automate triage, tracking, or reporting.

Skills

Fullstack development

Backend languages

Frontend frameworks

Secure coding

Vulnerability remediation

Bug bounty experience

CI/CD pipelines

Kubernetes familiarity

Tools

CI/CD tooling

SAST/SCA/DAST tooling

GitHub/GitLab/Bitbucket

Kubernetes

Job description

Jora Malaysia is seeking a senior software engineer with 5+ years of fullstack experience to lead vulnerability remediation across Web and API surfaces. You will read reviews from vulnerability scans, triage findings, and ship code fixes directly in core codebases.

Responsibilities include coordinating with DevOps and security teams, maintaining remediation dashboards, and contributing to secure development practices. Familiarity with bug bounty processes is valued.