Security Verification & Testing Specialist

GX Bank Berhad; Petaling Jaya; On-site; MYR 180,000 - 300,000; Full time

Job summary

GX Bank Berhad (GXBank) invites a security engineering leader to perform secure design review, threat modelling, and secure code review across mobile, API, and web applications. You will deliver comprehensive reports for technical and executive audiences and drive security improvements.

You will mentor engineers, develop security standards and training, and lead engagements from scoping to remediation with engineering teams.

Qualifications

• Background in coding with fluency in several modern programming languages.
• Excellent understanding of secure design and coding best practices.
• Experience using scanning tools for mobile, API and web app security testing.
• At least 6 years with 3+ of: cloud (AWS/Azure/GCP), secure design, or secure coding.
• Design of highly secure and available solutions for financial services.

Responsibilities

• Perform secure design review and threat modelling.
• Conduct secure code review, penetration testing and triage scan results.
• Develop accurate reports and presentations for technical and executive audiences.
• Communicate findings and security strategy to stakeholders.
• Develop and socialize security standards and training on secure design practices.
• Lead engagements with engineering teams from scoping through remediation; mentor staff.

Skills

Secure design

Coding languages

Security testing

Cloud architectures

Mobile/APIs/web apps

Penetration testing

Job description

Get to know our Company

GX Bank Berhad - the Grab-led Digital Bank - is the FIRST digital bank in Malaysia, approved by BNM to commence operations. We aim to leverage technology and innovation to serve the financial needs of the unserved and underserved individuals, and micro and small medium enterprises. We are driven by our shared purpose and passion to bring positive transformation to the banking industry, starting with solutions that address the financial struggles of Malaysians and businesses.

Get to know the Role

Perform secure design review, threat modelling, secure code review, penetration testing and assist developers in triaging scan results. Develop comprehensive and accurate reports and presentations for both technical and executive audiences and make recommendations for security improvements. Effectively communicate findings and strategy to stakeholders including technical staff and executive leadership. Develop and socialise security standards, training courses on secure design best practices, related to cryptography, authentication, access control, etc. Lead engagements with Engineering teams from scoping through remediation, and mentoring less experienced staff.

The must haves

• Background in coding, fluent in several modern programming languages.


• Excellent understanding of secure design and coding best practices.


• Experience using scanning tools for mobile, API and web application security testing.


• At least 6 years experience with a minimum of 3 of the following: Strong experience with AWS, Azure or GCP.


• Design of highly-available and highly-secure solutions in the financial sector.


• Design of container-based infrastructures in the cloud.


• Development of mobile applications, RESTful APIs, web applications.


• Secure code review of mobile applications, RESTful APIs, web applications.


• Penetration testing of mobile applications, RESTful APIs, web applications.

GX Bank Berhad (GXBank) is Malaysia’s first digital bank that commenced operation on 1 September 2023. With a workforce of more than 95% Malaysians from both the finance and technology sectors, the bank aims to disrupt the current banking industry with customised innovative solutions that empower Malaysians to be financially resilient and support their financial goals. Powered by Grab, GXBank is a subsidiary of GXS Bank Pte. Ltd., – the digital bank joint venture between Grab Holdings Limited and Singapore Telecommunications Limited (Singtel) – and a consortium of other Malaysian investors, including Kuok Group.