Senior AppSec Engineer — Pen Tests & SDLC Governance

DKSH Management Ltd.; Kuala Lumpur; Hybrid; MYR 180,000 - 240,000; Full time

Job summary

DKSH is seeking a Senior Specialist Application Security Engineer in Kuala Lumpur to safeguard our digital landscape across the SDLC. You will lead penetration testing coordination, vulnerability management, and governance to protect web, API, and cloud applications.

You will produce remediation guidance, track findings, and drive risk-based remediation with developers, QA, and security operations, ensuring timely closure and strong security posture.

Qualifications

• Bachelor's degree or equivalent practical experience in cybersecurity, CS, or IT.
• 5+ years of cybersecurity experience with a focus on application security and secure SDLC.
• Ability to coordinate penetration testing, review reports, and drive remediation.
• Strong knowledge of OWASP Top 10 and API security.

Responsibilities

• Coordinate and manage application penetration testing activities (scoping, scheduling, evidence collection, vendor coordination, report review, retest tracking, closure).
• Conduct or support security assessments for web, API, mobile, cloud, and enterprise apps using manual testing and automated tools.
• Own vulnerability tracking from discovery to remediation with proper categorization and due dates.
• Provide remediation guidance for SQLi, XSS, broken authentication, insecure direct object references, weak crypto, and insecure configurations.
• Support secure SDLC activities including security requirements, threat modeling, and release checks.
• Prepare executive/technical reports on findings, remediation status, and risk themes.
• Drive remediation coordination across application owners, developers, QA, vendors, and security teams.
• Influence teams to validate closure based on evidence.

Skills

Penetration testing coordination

Vulnerability management

Secure SDLC

Remediation guidance

Risk-based remediation

Education

Bachelor's degree in Cybersecurity/CS/Software Engineering/IT

Tools

Burp Suite

Invicti

OWASP ZAP

Qualys

Microsoft Defender

SAST/DAST/SCA tooling

Job description

DKSH is seeking a Senior Specialist Application Security Engineer in Kuala Lumpur to safeguard our digital landscape across the SDLC. You will lead penetration testing coordination, vulnerability management, and governance to protect web, API, and cloud applications.

You will produce remediation guidance, track findings, and drive risk-based remediation with developers, QA, and security operations, ensuring timely closure and strong security posture.