Senior AppSec & DevSecOps Engineer (Security by Design)

Randstad Malaysia; Kuala Lumpur; On-site; MYR 120,000 - 210,000; Full time

Job summary

Randstad Malaysia is seeking a Senior Application Security Specialist to strengthen security across the Software Development Lifecycle, DevSecOps and architecture. The role is hands-on, partnering with software engineering, Agile and DevOps teams to build secure applications and services.

You will embed Secure by Design and Shift‑Left practices, perform threat modelling, risk assessments and security reviews, and guide security controls across cloud-native environments.

Qualifications

• Hands-on Application Security and DevSecOps experience in a security-driven environment.
• Experience performing threat modelling, risk assessments and security reviews.
• Knowledge of secure SDLC practices and modern security controls across cloud-native architectures.

Responsibilities

• Partner with Agile, DevOps and security teams to embed security in design and development.
• Conduct security reviews and architecture assessments to identify weaknesses and remediation.
• Perform threat modelling, risk analyses and security risk assessments.
• Define and communicate security requirements aligned to policy and architecture.
• Provide guidance across the SDLC for secure design, coding and testing.
• Promote Secure by Design and Shift‑Left practices in CI/CD pipelines.
• Assess cloud-native security including container and API security controls.
• Research emerging threats and advise on mitigations.
• Develop and improve security standards, processes and automation.
• Coach engineers and stakeholders on secure development and security culture.

Skills

application security

Product Security

Security Architecture

Threat Modelling

Risk Assessment

Secure SDLC

DevSecOps

Security-by-Design

Shift-Left Security

OWASP Top 10

SAST

DAST

SCA

API Security

API Testing

Container Security

Cloud Security

CI/CD Security

Vulnerability Management

Education

Bachelor Degree

Tools

AWS

Azure

GCP

Kubernetes

Docker

Job description

Randstad Malaysia is seeking a Senior Application Security Specialist to strengthen security across the Software Development Lifecycle, DevSecOps and architecture. The role is hands-on, partnering with software engineering, Agile and DevOps teams to build secure applications and services.

You will embed Secure by Design and Shift‑Left practices, perform threat modelling, risk assessments and security reviews, and guide security controls across cloud-native environments.