Security Verification & Testing Specialist

GXS; Petaling Jaya; On-site; MYR 120,000 - 190,000; Full time

Job summary

GX Bank Berhad, the Grab-led digital bank, is Malaysia's first digital bank approved by BNM. We aim to leverage technology to serve the financial needs of individuals, micro and small businesses, delivering secure and scalable banking solutions.

The role involves performing secure design review, threat modelling, secure code review, and penetration testing, and preparing comprehensive reports for technical and executive audiences.

Qualifications

• Strong background in coding across modern languages.
• Excellent understanding of secure design and coding best practices.
• Experience using scanning tools for mobile, API and web applications security testing.
• At least 2–4 years of experience with a mix of cloud, security design and testing.

Responsibilities

• Perform secure design review, threat modelling, secure code review, penetration testing and assist developers in triaging scan results.
• Develop comprehensive reports and presentations for technical and executive audiences with recommendations for security improvements.
• Communicate findings and strategy to stakeholders including technical staff and executive leadership.
• Develop and socialise security standards and training courses on secure design practices.

Skills

Secure design

Coding languages

Security testing

Threat modelling

Cloud platforms

Job description

Get to know our Company:

GX Bank Berhad - the Grab-led Digital Bank - is the FIRST digital bank in Malaysia, approved by BNM to commence operations. We aim to leverage technology and innovation to serve the financial needs of the unserved and underserved individuals, and micro and small medium enterprises.

We are driven by our shared purpose and passion to bring positive transformation to the banking industry, starting with solutions that address the financial struggles of Malaysians and businesses.

Get to know the Role:

• Perform secure design review, threat modelling, secure code review, penetration testing and assist developers in triaging scan results.
• Develop comprehensive and accurate reports and presentations for both technical and executive audiences and make recommendations for security improvements.
• Effectively communicate findings and strategy to stakeholders including technical staff and executive leadership.
• Develop and socialise security standards, training courses on secure design best practices, related to cryptography, authentication, access control, etc.
• Lead engagements with Engineering teams from scoping through remediation, and mentoring less experienced staff.

The must haves:

• Background in coding, fluent in several modern programming languages.
• Excellent understanding of secure design and coding best practices.
• Experience using scanning tools for mobile, API and web application security testing.
• At least 2-4 years experience with a minimum of 3 of the following:
• Strong experience with AWS, Azure or GCP.
• Design of highly-available and highly-secure solutions in the financial sector.
• Design of container-based infrastructures in the cloud.
• Development of mobile applications, RESTful APIs, web applications.
• Secure code review of mobile applications, RESTful APIs, web applications.
• Penetration testing of mobile applications, RESTful APIs, web applications.