Senior AppSec Engineer: Threat-Driven SDLC Security Lead

DKSH Malaysia Sdn Bhd; Kuala Lumpur; On-site; MYR 180,000 - 300,000; Full time

Job summary

DKSH Malaysia Sdn Bhd is seeking an Senior Specialist Application Security Engineer to safeguard our digital landscape through security assurance across the full software development lifecycle. You will drive testing, vulnerability management, and governance for internal, third-party, and internet-facing apps.

The role requires coordinating penetration testing, delivering practical remediation guidance, and aligning with DKSH security standards to reduce risk.

Qualifications

• Bachelor's degree or equivalent practical experience in Cybersecurity, Computer Science, or related field.
• 5+ years of cybersecurity experience focused on application security, pentesting, vulnerability management or secure SDLC.
• Proven ability to coordinate application penetration testing, review reports, validate findings, and track remediation.

Responsibilities

• Coordinate and manage application penetration testing activities including scoping, scheduling, evidence collection, vendor coordination, report review, retest tracking, and closure validation.
• Conduct or support security assessments for web, API, mobile, cloud-hosted, and enterprise apps using manual testing and automated tools.
• Own vulnerability tracking from discovery to remediation, categorizing findings by severity, app, owner, risk, due date, and closure status.
• Provide remediation guidance for vulnerabilities (e.g., SQLi, XSS, auth flaws, insecure direct object references, weak encryption, insecure config, vulnerable components, missing logging).
• Support secure SDLC activities including security requirements, threat modeling inputs, secure coding guidance, release checks, and security sign-off.

Skills

Penetration testing coordination

Vulnerability management

Remediation tracking

Security reporting

Education

Bachelor's degree in Cybersecurity or related field

Tools

Burp Suite

Invicti

OWASP ZAP

Qualys

Microsoft Defender

Job description

DKSH Malaysia Sdn Bhd is seeking an Senior Specialist Application Security Engineer to safeguard our digital landscape through security assurance across the full software development lifecycle. You will drive testing, vulnerability management, and governance for internal, third-party, and internet-facing apps.

The role requires coordinating penetration testing, delivering practical remediation guidance, and aligning with DKSH security standards to reduce risk.