Senior Application Security Engineer - DevSecOps Leader

MindMerge Consulting; Petaling Jaya; On-site; MYR 120,000 - 180,000; Full time

Job summary

MindMerge Consulting is seeking a Senior Executive Engineer Application Security in Petaling Jaya, Malaysia. The role focuses on embedding security into application development and deployment to enable secure software delivery.

You will integrate security into SDLC and DevSecOps, manage security tools (SAST, DAST, SCA, secret scanning, container security), perform web app/API assessments, and collaborate with developers and cloud teams to strengthen the organization's security posture.

Qualifications

• 3–10 years of experience in application security.
• Experience integrating security into SDLC/DevSecOps.
• Familiar with SAST/DAST/SCA and secret scanning.
• Ability to assess web apps and APIs for security risks.

Responsibilities

• Integrate security requirements into SDLC and DevSecOps pipelines.
• Manage and support SAST, DAST, SCA and secret scanning tools.
• Perform application security assessments of web apps and APIs.
• Review architecture to identify security risks and recommend secure design.
• Establish secure coding standards and developer security awareness.
• Support secure deployment and validate security controls before release.
• Triage vulnerabilities, validate false positives, and track remediation.
• Monitor emerging threats and propose improvements to security posture.
• Collaborate with developers, DevOps, cloud teams and project teams.

Skills

Secure SDLC

DevSecOps

Threat modeling

Tools

SAST

DAST

SCA

secret scanning

container security scanning

Job description

MindMerge Consulting is seeking a Senior Executive Engineer Application Security in Petaling Jaya, Malaysia. The role focuses on embedding security into application development and deployment to enable secure software delivery.

You will integrate security into SDLC and DevSecOps, manage security tools (SAST, DAST, SCA, secret scanning, container security), perform web app/API assessments, and collaborate with developers and cloud teams to strengthen the organization's security posture.