Lead Application Security Engineer: Pen Tests & Secure SDLC

DKSH; Kuala Lumpur; Vor Ort; MYR 180.000 - 230.000; Vollzeit

Zusammenfassung

DKSH is seeking an Application Security Engineer to safeguard its digital landscape across the software development lifecycle. You will lead penetration testing, manage vulnerabilities, and drive AppSec governance for internal, third-party, and internet-facing apps.

You will coordinate testing, perform assessments with manual and automated tools, and provide actionable remediation guidance to reduce risk while embedding security throughout delivery.

Qualifikationen

• Bachelor's degree in cybersecurity or related field.
• 5+ years in cybersecurity focusing on application security.
• Experience coordinating app pen tests and remediation tracking.
• Strong knowledge of OWASP Top 10, API security, and risk-based remediation.
• Experience with Burp Suite, Invicti, ZAP, Qualys, Defender, and SAST/DAST/SCA tooling.

Aufgaben

• Coordinate and manage application penetration testing activities end to end.
• Conduct security assessments for web, API, mobile, cloud apps using manual and automated tools.
• Own vulnerability tracking from discovery to remediation with status.
• Provide remediation guidance for vulnerabilities (SQLi, XSS, auth flaws, etc.).
• Support secure SDLC activities including security requirements and threat modeling.
• Prepare executive and technical reports on findings and risk.
• Drive remediation coordination across owners, vendors, QA, and security teams.
• Influence teams to validate closure with evidence.
• Collaborate with SOC and infrastructure to strengthen prevention/detection.
• Champion secure-by-design and risk-based app delivery.

Kenntnisse

Penetration testing coordination

Vulnerability tracking

Remediation guidance

Secure SDLC

Report writing

Ausbildung

Bachelor's degree in Cybersecurity or related field

GWAPT / GWEB / OSCP / PNPT / CSSLP / CEH / Security+ or equivalent

Tools

Burp Suite

Invicti

OWASP ZAP

Qualys

Microsoft Defender

SAST/DAST/SCA tooling

Jobbeschreibung

DKSH is seeking an Application Security Engineer to safeguard its digital landscape across the software development lifecycle. You will lead penetration testing, manage vulnerabilities, and drive AppSec governance for internal, third-party, and internet-facing apps.

You will coordinate testing, perform assessments with manual and automated tools, and provide actionable remediation guidance to reduce risk while embedding security throughout delivery.