Security Program Lead: AppSec, Cloud & IT

Pixlr Group; Subang Jaya; On-site; MYR 180,000 - 240,000; Full time

Benefits offered by this job

Annual leaves

Medical cover

Subsidies

Training & growth

Diversity culture

Job summary

Pixlr Group is seeking an hands-on IT Security Manager to own the security program across product, cloud, and corporate environments. You will define policies, conduct risk assessments, and ensure compliance while partnering with Engineering, IT, Product, Legal, and Operations.

You will lead secure SDLC practices, implement security tooling in CI/CD, and guide teams on OWASP Top 10, API security, and supply-chain risks. Strong incident response and cloud security experience are essential.

Qualifications

• 6–10 years of experience in IT or application security.
• Hands-on experience with application security and vulnerability management.
• Practical expertise in AWS security services, IAM and cloud monitoring.
• Familiarity with SAST/DAST and security logging tools.
• Knowledge of ISO 27001, SOC 2, PDPA, GDPR is a plus.

Responsibilities

• Own and run security program across product, cloud, and corporate security.
• Embed security in the software development lifecycle and perform threat modelling.
• Operate CI/CD security tooling for SAST, DAST, and dependency analysis.
• Define baseline cloud security controls, identity management, logging and monitoring.
• Lead incident response planning and coordinated security incidents.
• Enforce identity lifecycle management and access controls across platforms.

Skills

Application security

Secure SDLC

Vulnerability management

AWS security

IAM & cloud monitoring

Tools

SAST

DAST

Dependency scanning

Secret management

Security logging platforms

Job description

Pixlr Group is seeking an hands-on IT Security Manager to own the security program across product, cloud, and corporate environments. You will define policies, conduct risk assessments, and ensure compliance while partnering with Engineering, IT, Product, Legal, and Operations.

You will lead secure SDLC practices, implement security tooling in CI/CD, and guide teams on OWASP Top 10, API security, and supply-chain risks. Strong incident response and cloud security experience are essential.