Security Assurance Lead: Threat Modeling & App Security

Confidential; Petaling Jaya; On-site; MYR 180,000 - 260,000; Full time

Job summary

Confidential is seeking an experienced security architect with hands-on expertise in secure design, cryptography, and API/mobile/web security. You will lead architectural reviews, threat modelling, and advanced testing across cloud and on-prem environments.

You will develop innovative security controls, socialise hardening standards, and drive risk-compliant security programs while collaborating with Engineering on purple-team exercises and AI security initiatives.

Qualifications

• Must have hands-on secure architecture design and development experience.
• Strong coding background and fluency in multiple modern languages.
• Solid understanding of cryptography and encryption standards.
• At least 8 years in security with 4+ of the listed areas.

Responsibilities

• Perform secure architecture review, threat modelling, vulnerability assessment, and penetration testing.
• Develop/evaluate security controls to strengthen mobile app security and fraud detection.
• Produce threat landscape reports on evolving tech such as PQC and autonomous AI agents.
• Develop and socialise security/hardening standards to reduce attack surface.
• Develop/evaluate AI security testing processes and autonomous pentesting tools.
• Verify compliance of infrastructure and apps against security standards.
• Create dashboards to track non-compliance and report to Risk Committee; engage 1LoD/2LoD stakeholders.
• Lead purple-teaming engagements with Engineering from scoping to remediation.

Skills

Strong coding background

Secure design & coding practices

Cryptographic algorithms & encryption

Experience with fintech security

Design & implementation of cloud-based

Agentic AI security solutions

RESTful APIs, web/mobile security

Tools

Container-based infrastructures in the cloud

Job description

Confidential is seeking an experienced security architect with hands-on expertise in secure design, cryptography, and API/mobile/web security. You will lead architectural reviews, threat modelling, and advanced testing across cloud and on-prem environments.

You will develop innovative security controls, socialise hardening standards, and drive risk-compliant security programs while collaborating with Engineering on purple-team exercises and AI security initiatives.