Senior Application Security Engineer: AppSec Lead

DKSH Management Ltd.; Kuala Lumpur; On-site; MYR 150,000 - 210,000; Full time

Job summary

DKSH Management Ltd. in Kuala Lumpur, Malaysia, is seeking a Senior Specialist Application Security Engineer to safeguard our digital landscape across the full software development lifecycle.

You will drive application security assurance, coordinate penetration testing, and lead remediation tracking with stakeholders. You will apply deep knowledge of OWASP Top 10, API security, and secure SDLC practices to deliver practical guidance, reports, and governance across internal, partner, and

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, or related field; certifications preferred.
• 5+ years in application security, penetration testing, or security assurance.
• Experience coordinating application penetration testing and remediation tracking.
• Strong knowledge of OWASP Top 10, API security and secure coding.
• Experience with Burp Suite, ZAP, Invicti, Qualys and SAST/DAST/SCA tooling.

Responsibilities

• Coordinate and manage application penetration testing activities.
• Conduct/lead technical security assessments for web, API, mobile, cloud, and enterprise apps.
• Own vulnerability tracking from discovery to remediation.
• Provide remediation guidance for common web vulnerabilities (e.g., SQLi, XSS, auth flaws).
• Support secure SDLC activities and security sign-off.
• Prepare executive and technical reports on findings, remediation status, and risk.
• Drive remediation coordination across application owners, developers, QA, vendors, and security teams.
• Collaborate with SOC and infrastructure to strengthen defenses against application attacks.
• Champion secure-by-design and risk-based application delivery.

Skills

Application Security

Penetration Testing Coordination

Vulnerability Management

Secure SDLC

OWASP Top 10

Burp Suite

OWASP ZAP

Invicti

Qualys

SAST/DAST/SCA tooling

Education

Bachelor's degree in Cybersecurity/related field

Tools

Burp Suite

OWASP ZAP

Invicti

Qualys

Job description

DKSH Management Ltd. in Kuala Lumpur, Malaysia, is seeking a Senior Specialist Application Security Engineer to safeguard our digital landscape across the full software development lifecycle.

You will drive application security assurance, coordinate penetration testing, and lead remediation tracking with stakeholders. You will apply deep knowledge of OWASP Top 10, API security, and secure SDLC practices to deliver practical guidance, reports, and governance across internal, partner, and