Senior AppSec Engineer - Lead Secure SDLC & Remediation

DKSH Group; Kuala Lumpur; On-site; MYR 120,000 - 160,000; Full time

Job summary

DKSH Group is seeking an experienced Senior Specialist Application Security Engineer to safeguard its digital landscape across the software lifecycle. You will drive application security assurance, coordinate pen tests, and guide remediation with strong collaboration across security, development, and operations teams.

The role requires deep knowledge of OWASP Top 10, API security, secure SDLC, and hands-on experience with industry tools. Join DKSH to strengthen security in Asia's leading markets.

Qualifications

• Bachelor's degree in cybersecurity or related field; multiple certifications preferred.
• 5+ years of cybersecurity experience focusing on application security.
• Experience coordinating application penetration testing and remediation tracking.
• Strong knowledge of OWASP Top 10, API security, authentication & session management.
• Experience with security tooling and reporting dashboards.

Responsibilities

• Coordinate and manage application penetration testing activities including scoping, scheduling, evidence collection, vendor coordination, report review, retest tracking, and closure validation.
• Conduct or support security assessments for web, API, mobile, cloud, and enterprise apps using manual and automated testing; deliver findings to drive risk reduction.
• Own vulnerability tracking from discovery to remediation with proper categorization and due dates.
• Provide remediation guidance for issues like SQLi, XSS, insecure auth, insecure configurations, and vulnerable components.
• Support secure SDLC activities including security requirements, threat modeling inputs, and release checks.
• Prepare executive and technical reports highlighting critical findings, remediation status, risk themes, and business impact.
• Drive remediation coordination across app owners, developers, QA, vendors, and infra teams to ensure timely fixes.
• Collaborate with SOC and infrastructure to strengthen prevention and detection against attacks and credential abuse.
• Champion secure-by-design and risk-based app delivery practices.

Skills

Penetration testing coordination

Vulnerability management

Remediation tracking

OWASP Top 10

API security

Authentication & session management

Secure coding

Reporting dashboards

Education

Bachelor's degree in Cybersecurity/CS/Software Engineering/IT

GWAPT, GWEB, OSCP, PNPT, CSSLP, CEH, Security+ or equivalent certifications

Tools

Burp Suite

Invicti

OWASP ZAP

Qualys

Microsoft Defender

SAST/DAST/SCA tooling

Job description

DKSH Group is seeking an experienced Senior Specialist Application Security Engineer to safeguard its digital landscape across the software lifecycle. You will drive application security assurance, coordinate pen tests, and guide remediation with strong collaboration across security, development, and operations teams.

The role requires deep knowledge of OWASP Top 10, API security, secure SDLC, and hands-on experience with industry tools. Join DKSH to strengthen security in Asia's leading markets.