Senior Application Security Engineer Lead

DKSH; Kuala Lumpur; On-site; MYR 160,000 - 320,000; Full time

Job summary

DKSH is seeking an experienced Application Security Engineer to safeguard our digital landscape across the complete software development lifecycle. You will drive penetration testing, vulnerability management and governance for internal, partner and internet-facing apps.

You will coordinate testing activities, perform security assessments, track vulnerabilities to remediation and provide actionable guidance to developers and vendors.

Qualifications

• Bachelor's degree or higher in Cybersecurity, Computer Science, Software Engineering, Information Technology, or equivalent.
• 5+ years of cybersecurity experience focused on application security, pentesting, vulnerability management, SDLC, or security assurance.
• Proven capability in coordinating application penetration testing, report review, remediation tracking.
• Strong knowledge of OWASP Top 10, API security, auth/sess mgmt, secure coding, WAF concepts, and risk-based remediation.

Responsibilities

• Coordinate and manage application penetration testing activities across scope, scheduling, evidence collection, vendor coordination, report review, retest tracking and closure validation.
• Conduct or support security assessments for web, API, mobile, cloud-hosted and enterprise apps using manual testing and automated tools to drive risk reduction.
• Own vulnerability tracking from discovery through remediation with severity, owner, risk and due date tracking.
• Provide remediation guidance for vulnerabilities including SQLi, XSS, auth flaws, insecure direct object references, weak encryption, misconfigurations, vulnerable components, and logging gaps.
• Support secure SDLC activities with security requirements, threat modeling inputs, secure coding guidance, release checks and security sign-off criteria.
• Prepare executive/technical reports summarizing critical findings, remediation status, risk themes and business impact.
• Drive remediation coordination across application owners, developers, QA, vendors, infra and security operations.
• Influence teams to validate closure based on evidence and substantive remediation.
• Collaborate with SOC and infrastructure to strengthen prevention/detection against app attacks, webshells, credential abuse.
• Champion secure-by-design and risk-based app delivery practices.

Skills

OWASP Top 10

API security

Auth & session mgmt

Secure coding

WAF concepts

Risk-based remediation

Education

Bachelor's degree in Cybersecurity / CS / related

Certifications: GWAPT, GWEB, OSCP, PNPT, CSSLP, CEH, Security+

Tools

Burp Suite

Invicti

OWASP ZAP

Qualys

Microsoft Defender

SAST/DAST/SCA tooling

Job description

DKSH is seeking an experienced Application Security Engineer to safeguard our digital landscape across the complete software development lifecycle. You will drive penetration testing, vulnerability management and governance for internal, partner and internet-facing apps.

You will coordinate testing activities, perform security assessments, track vulnerabilities to remediation and provide actionable guidance to developers and vendors.