Senior Application Security Engineer for DevSecOps

Swift Transportation; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

Swift, a global leader in secure financial messaging, seeks a Senior Security Engineer to support Agile and DevSecOps teams by securing Swift core applications and services. You will coordinate security initiatives, perform threat modelling, and guide secure coding, testing, and risk management across international teams.

Join a culture that values expert collaboration and continuous security improvement. Responsibilities include defining security requirements, promoting security tools in the

Qualifications

• Strong understanding in application security.
• Security architecture including threat modelling and risk analysis.
• Security requirements definition based on business needs, classification, threats, and risks.
• Demonstrated experience in secure coding, security testing practices and tools and vulnerability management.
• OWASP top 10.
• SAST, DAST, SCA, API testing and/or containers vulnerability management
• Risk Assessments experience, being able to use advanced security and analytical skills to evaluate security risks, identify and design mitigations to bring risk within appetite.
• Understanding of Agile and DevSecOps principles and how to integrate security into them.
• Typically has 4 to 5 years of relevant work experience.

Responsibilities

• Be the trusted partner of Agile and DevSecOps teams to support and collaborate securing their products from application and/or architecture perspective.
• Provide security requirements aligned with policies and standards and adapted to technologies stacks (Cloud Native, containers, orchestrator, etc).
• Provide security technical assistance during software design, development and operations activities.
• Maintain security standards and guidelines to respond to changes in threats, technology, or best practices.
• Manage and promote usage of security tools in development pipeline and operations.
• Research and assess new threats, vulnerabilities and security alerts and recommend remedial actions.
• Design and implementation of capabilities, processes and/or tools to improve the security in the software delivery life cycle, security automation testing, secure by design activities, etc.
• Identify opportunities for improvements in work processes and innovative approaches to completing scope of work in an efficient way.
• Promote a strong security culture at Swift. We expect you to treat security culture as a brand, take it seriously and recognized that it is hard-fought and easily lost.
• Coach and share knowledge with team members.

Skills

Application security

Security architecture

Threat modelling

Risk analysis

Secure coding

Security testing

OWASP Top 10

SAST/DAST/API testing

Container security

Agile & DevSecOps

Security experience

Job description

Swift, a global leader in secure financial messaging, seeks a Senior Security Engineer to support Agile and DevSecOps teams by securing Swift core applications and services. You will coordinate security initiatives, perform threat modelling, and guide secure coding, testing, and risk management across international teams.

Join a culture that values expert collaboration and continuous security improvement. Responsibilities include defining security requirements, promoting security tools in the