Senior App Security Engineer — Code Audit & SDL Lead

Bybit Limited; Kuala Lumpur; On-site; MYR 180,000 - 300,000; Full time

Benefits offered by this job

Study Growth Fund

Internal Events

Global Collaboration

Career Advancement

Internal Mobility

Job summary

Bybit is seeking a Senior Application Security Engineer in Kuala Lumpur to lead security audits across Java and Go stacks, and to drive governance for platform systems. You will assess risks in business requirements and implementation plans, and propose actionable security controls.

The role requires 3+ years in security auditing, strong Java/Go expertise, knowledge of SDL, OWASP, and white-box methodologies, plus ability to leverage AI tools for security efficiency.

Qualifications

• 3+ years of audit experience based on Java or Go
• Led or participated in SDL (Security Development Lifecycle) implementation
• Proficient in OWASP Top 10 and vulnerability exploitation
• Expert-level proficiency in Java and/or Go
• Familiar with white-box audit methodologies
• Experience with Go/Spring based frameworks and security architectures
• Able to use AI tools to enhance security work efficiency
• Strong communication and documentation skills

Responsibilities

• Conduct manual code security audits on business code (Java, Golang, JS, C++, etc.) and write audit reports
• Track domestic and international security developments; analyze and reproduce vulnerabilities
• Identify security risks in business architecture, processes and logic; propose and drive solutions
• Drive security solution implementation and risk governance

Skills

Strong logical thinking

Good communication

Documentation writing

Proactive attitude

Education

Associate degree or above

Tools

Java

Go

SpringMVC

SSM

Gin

GoZero

Job description

Bybit is seeking a Senior Application Security Engineer in Kuala Lumpur to lead security audits across Java and Go stacks, and to drive governance for platform systems. You will assess risks in business requirements and implementation plans, and propose actionable security controls.

The role requires 3+ years in security auditing, strong Java/Go expertise, knowledge of SDL, OWASP, and white-box methodologies, plus ability to leverage AI tools for security efficiency.