Onsite AppSec Engineer: SDLC & DevSecOps

Lavu Tech Solutions Sdn Bhd; Kajang; On-site; MYR 120,000 - 180,000; Full time

Job summary

Lavu Tech Solutions Sdn Bhd is seeking an experienced Application Security/DevSecOps engineer to integrate security into the SDLC and DevSecOps pipelines in Kajang, Malaysia. You will manage security tools, conduct web and API security assessments, and work with cross-functional teams to improve secure design practices.

The role requires hands-on experience with SAST/DAST/SCA, Burp Suite, and CI/CD security integration, with a focus on reducing risk across applications and deployments.

Qualifications

• 4+ years of experience in application security, DevSecOps, or software security engineering.
• Strong knowledge of OWASP standards and secure coding practices.
• Hands-on experience with SAST, DAST, SCA, and container security tools.
• Familiarity with Burp Suite.
• Understanding of CI/CD pipelines and secure SDLC integration.
• Relevant certifications are advantageous.

Responsibilities

• Integrate security requirements, controls and testing into SDLC and DevSecOps pipelines.
• Manage and support application security tools: SAST, DAST, SCA, secret scanning, and container security scanning.
• Conduct web app and API security assessments to identify vulnerabilities.
• Review architectures and designs, recommending secure design improvements.
• Establish secure coding standards and developer security awareness initiatives.
• Validate security controls before releases and support secure deployments.
• Perform vulnerability triage and track remediation.
• Monitor threats and recommend improvements.
• Collaborate with developers, DevOps, cloud teams, and stakeholders throughout SDLC.

Skills

4+ years exp

OWASP standards

Analytical skills

Communication

Collaboration

Tools

Burp Suite

Job description

Lavu Tech Solutions Sdn Bhd is seeking an experienced Application Security/DevSecOps engineer to integrate security into the SDLC and DevSecOps pipelines in Kajang, Malaysia. You will manage security tools, conduct web and API security assessments, and work with cross-functional teams to improve secure design practices.

The role requires hands-on experience with SAST/DAST/SCA, Burp Suite, and CI/CD security integration, with a focus on reducing risk across applications and deployments.