Product Security Engineer: Secure SDLC & Cloud

Agensi Pekerjaan Penta Consultancy Sdn. Bhd; Kuala Lumpur; On-site; MYR 180,000 - 300,000; Full time

Job summary

Agensi Pekerjaan Penta Consultancy Sdn. Bhd is seeking a senior security engineer focused on product security to lead threat modeling, secure SDLC implementation, and security reviews across multiple product lines in Malaysia.

You will partner with engineering, product, and technology teams, drive secure coding practices, oversee vulnerability remediation, and ensure AWS security controls, data protection, and API security meet regulatory and business requirements.

Qualifications

• Minimum 4–6 years in product/security engineering roles.
• Experience in threat modeling, secure architecture reviews, and application security assessments.
• Proven track record implementing or operating Secure SDLC processes.

Responsibilities

• Develop, implement, and maintain product security standards and practices.
• Lead security reviews, threat modeling, and risk assessments across SDLC.
• Coordinate with engineering and product teams to remediate vulnerabilities.
• Manage cloud security assessments (AWS) and identity/network protections.
• Develop security policies, baselines, and awareness initiatives for engineering teams.
• Act as the primary product security expert and advocate for best practices.

Skills

Threat modeling

Secure architecture design

Application security assessments

Secure SDLC ownership

Cross-functional collaboration

Independent ownership

Education

Bachelor's degree in Computer Science / Information Security

Tools

SAST tools

DAST tools

SCA tools

Vulnerability management platforms

IAM & KMS knowledge

Job description

Agensi Pekerjaan Penta Consultancy Sdn. Bhd is seeking a senior security engineer focused on product security to lead threat modeling, secure SDLC implementation, and security reviews across multiple product lines in Malaysia.

You will partner with engineering, product, and technology teams, drive secure coding practices, oversee vulnerability remediation, and ensure AWS security controls, data protection, and API security meet regulatory and business requirements.