Senior Application Security Specialist

Swift Transportation; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

Swift, a global leader in secure financial messaging, seeks a Senior Security Engineer to support Agile and DevSecOps teams by securing Swift core applications and services. You will coordinate security initiatives, perform threat modelling, and guide secure coding, testing, and risk management across international teams.

Join a culture that values expert collaboration and continuous security improvement. Responsibilities include defining security requirements, promoting security tools in the

Qualifications

• Strong understanding in application security.
• Security architecture including threat modelling and risk analysis.
• Security requirements definition based on business needs, classification, threats, and risks.
• Demonstrated experience in secure coding, security testing practices and tools and vulnerability management.
• OWASP top 10.
• SAST, DAST, SCA, API testing and/or containers vulnerability management
• Risk Assessments experience, being able to use advanced security and analytical skills to evaluate security risks, identify and design mitigations to bring risk within appetite.
• Understanding of Agile and DevSecOps principles and how to integrate security into them.
• Typically has 4 to 5 years of relevant work experience.

Responsibilities

• Be the trusted partner of Agile and DevSecOps teams to support and collaborate securing their products from application and/or architecture perspective.
• Provide security requirements aligned with policies and standards and adapted to technologies stacks (Cloud Native, containers, orchestrator, etc).
• Provide security technical assistance during software design, development and operations activities.
• Maintain security standards and guidelines to respond to changes in threats, technology, or best practices.
• Manage and promote usage of security tools in development pipeline and operations.
• Research and assess new threats, vulnerabilities and security alerts and recommend remedial actions.
• Design and implementation of capabilities, processes and/or tools to improve the security in the software delivery life cycle, security automation testing, secure by design activities, etc.
• Identify opportunities for improvements in work processes and innovative approaches to completing scope of work in an efficient way.
• Promote a strong security culture at Swift. We expect you to treat security culture as a brand, take it seriously and recognized that it is hard-fought and easily lost.
• Coach and share knowledge with team members.

Skills

Application security

Security architecture

Threat modelling

Risk analysis

Secure coding

Security testing

OWASP Top 10

SAST/DAST/API testing

Container security

Agile & DevSecOps

Security experience

Job description

ABOUT US

We’re the world’s leading provider of secure financial messaging services, headquartered in Belgium. We are the way the world moves value – across borders, through cities and overseas. No other organisation can address the scale, precision, pace and trust that this demands, and we’re proud to support the global economy.

We’re unique too. We were established to find a better way for the global financial community to move value – a reliable, safe and secure approach that the community can trust, completely. We’re always striving to be better and are constantly evolving in an ever-changing landscape, without undermining that trust. Five decades on, our vibrant community reflects the complexity and diversity of the financial ecosystem. We innovate diligently, test exhaustively, then implement fast. In a connected and exciting era, our mission has never been more relevant. Swift now has a presence in 200+ countries and legal territories to serve a community of more than 12,000 banks and financial institutions.

Are you passionate about application security and cyber security challenges, do you want to leverage your expertise securing the design and implementation of Swift core applications and services? As Senior member of the team your core responsibility will be to support Agile and DevSecOps teams delivering secure applications. Additionally, you will be coordinating security initiatives, and enriching your experience by working with an international and diverse team of IT security experts and SMEs. Our team highly encourages the contribution of ideas and drives the generation of new concepts to maintain Swift outstanding security.

What to expect

As part of the team, you will drive and/or contribute to key activities such:

• Be the trusted partner of Agile and DevSecOps teams to support and collaborate securing their products from application and/or architecture perspective.
• Provide security requirements aligned with policies and standards and adapted to technologies stacks (Cloud Native, containers, orchestrator, etc).
• Provide security technical assistance during software design, development and operations activities.
• Maintain security standards and guidelines to respond to changes in threats, technology, or best practices.
• Manage and promote usage of security tools in development pipeline and operations.
• Research and assess new threats, vulnerabilities and security alerts and recommend remedial actions.
• Design and implementation of capabilities, processes and/or tools to improve the security in the software delivery life cycle, security automation testing, secure by design activities, etc.
• Identify opportunities for improvements in work processes and innovative approaches to completing scope of work in an efficient way.
• Promote a strong security culture at Swift. We expect you to treat security culture as a brand, take it seriously and recognized that it is hard-fought and easily lost.
• Coach and share knowledge with team members.

Professional knowledge and expertise

• Strong understanding in application security
• Security architecture including threat modelling and risk analysis.
• Security requirements definition based on business needs, classification, threats, and risks.
• Demonstrated experience in secure coding, security testing practices and tools and vulnerability management.
• OWASP top 10.
• SAST, DAST, SCA, API testing and/or containers vulnerability management
• Risk Assessments experience, being able to use advanced security and analytical skills to evaluate security risks, identify and design mitigations to bring risk within appetite.
• Understanding of Agile and DevSecOps principles and how to integrate security into them.
• Typically has 4 to 5 years of relevant work experience.

Other expectations and skills

• Team player, respect diversity.
• Act with business understanding, build and reinforce customer relationship.
• Self-organised, proactive and accountable for delivering results.
• Demonstrate operational excellence. Ability to self-learn and coach others in fast paced complex and technical environment.
• Strong analytical skills.
• Communicate effectively, strong written, verbal and presentation skills, able to adapt communication to diverse audiences

What we offer

We give you the freedom to be yourself. We are creating an environment of unique individuals – like you – with different perspectives on the financial industry and the world. A diverse and inclusive environment in which everyone’s voice counts and where you can reach your full potential.

We are committed to an inclusive and accessible recruitment process. If you require a reasonable accommodation related to accessibility during your application or interview, please contact [e-mail] or indicate this in your application.

Please note that this mailbox is not monitored for general recruitment enquiries and should only be used for accessibility or accommodation-related requests (for example related to vision, hearing or neurodiversity).

All requests are confidential and will not affect your candidacy.