Senior App Security Tester — DevSecOps & Risk Mitigation

Deloitte Southeast Asia; Kuala Lumpur; On-site; MYR 180,000 - 240,000; Full time

Job summary

Deloitte Southeast Asia in Kuala Lumpur is seeking a Senior Global Technology Security Tester to proactively identify and remediate security risks across applications and development environments. You will partner with developers, engineers and product teams to embed security throughout the software development lifecycle, leveraging automated and manual testing, risk assessment, and DevSecOps enablement.

The role requires strong knowledge of OWASP Top 10, hands-on tooling, scripting, and the

Qualifications

• Bachelor’s Degree or equivalent work experience.
• Experience in Static, Dynamic, Interactive Application Software Testing and Software Composition Analysis using tools such as Snyk, Fortify, Contrast.
• Knowledge of OWASP Top 10 for Web Apps, API, Open Source, and LLMs.
• Familiarity with CWE Top 25 and trends in public vulnerabilities and zero-days.
• Ability to read and write at least one scripting language (e.g., Python, PowerShell).
• Ability to read full stack languages/frameworks (e.g., C#, .NET, Java).
• Familiarity with DevOps tools (Azure Repos, Github, Azure Pipelines, Github Actions).
• Experience working with diverse stakeholders, preferably on a global basis.
• Strong prioritization and time-management skills.
• Excellent written and verbal communication with technical and non-technical stakeholders.

Responsibilities

• Conduct application security testing (DAST, SAST, SCA, container scanning, and manual verification).
• Analyze test results to determine contextual risk and explain threats to developers and teams.
• Provide remediation guidance on true positives from tests.
• Assist teams in integrating security testing into automated DevSecOps workflows (IDEs, code repos, image registries, CI/CD).

Skills

Security testing

DAST/SAST

OWASP Top 10

Python scripting

DevSecOps

CI/CD pipelines

Stakeholder mgmt

Global teams

Education

Bachelor’s degree

Tools

Snyk

Fortify

Contrast

Burp Suite

OWASP ZAP

Postman

Swagger

NMAP

SQLMap

Job description

Deloitte Southeast Asia in Kuala Lumpur is seeking a Senior Global Technology Security Tester to proactively identify and remediate security risks across applications and development environments. You will partner with developers, engineers and product teams to embed security throughout the software development lifecycle, leveraging automated and manual testing, risk assessment, and DevSecOps enablement.

The role requires strong knowledge of OWASP Top 10, hands-on tooling, scripting, and the