Senior Engineer - Application Security

Lavu Tech Solutions Sdn Bhd; Kajang; On-site; MYR 120,000 - 180,000; Full time

Job summary

Lavu Tech Solutions Sdn Bhd is seeking an experienced Application Security/DevSecOps engineer to integrate security into the SDLC and DevSecOps pipelines in Kajang, Malaysia. You will manage security tools, conduct web and API security assessments, and work with cross-functional teams to improve secure design practices.

The role requires hands-on experience with SAST/DAST/SCA, Burp Suite, and CI/CD security integration, with a focus on reducing risk across applications and deployments.

Qualifications

• 4+ years of experience in application security, DevSecOps, or software security engineering.
• Strong knowledge of OWASP standards and secure coding practices.
• Hands-on experience with SAST, DAST, SCA, and container security tools.
• Familiarity with Burp Suite.
• Understanding of CI/CD pipelines and secure SDLC integration.
• Relevant certifications are advantageous.

Responsibilities

• Integrate security requirements, controls and testing into SDLC and DevSecOps pipelines.
• Manage and support application security tools: SAST, DAST, SCA, secret scanning, and container security scanning.
• Conduct web app and API security assessments to identify vulnerabilities.
• Review architectures and designs, recommending secure design improvements.
• Establish secure coding standards and developer security awareness initiatives.
• Validate security controls before releases and support secure deployments.
• Perform vulnerability triage and track remediation.
• Monitor threats and recommend improvements.
• Collaborate with developers, DevOps, cloud teams, and stakeholders throughout SDLC.

Skills

4+ years exp

OWASP standards

Analytical skills

Communication

Collaboration

Tools

Burp Suite

Job description

Looking for someone available locally only.

Key Responsibilities

• Integrate security requirements, controls, and testing into the Software Development Life Cycle (SDLC) and DevSecOps pipelines
• Manage and support application security tools, including SAST, DAST, SCA, secret scanning, and container security scanning solutions
• Conduct web application and API security assessments to identify vulnerabilities and potential risks
• Review application architectures and designs, recommending secure design practices and improvements
• Establish secure coding standards, guidelines, and developer security awareness initiatives
• Validate security controls before production releases and support secure application deployments
• Perform vulnerability triage, validate false positives, and track remediation activities
• Monitor emerging application security threats and recommend improvements to security practices
• Collaborate with developers, DevOps engineers, cloud teams, and project stakeholders throughout the SDLC

Specifications

• 4+ years of relevant experience in application security, DevSecOps, or software security engineering
• Strong understanding of OWASP standards, secure coding practices, and common application vulnerabilities
• Hands-on experience with SAST, DAST, SCA, secret scanning, and container security tools
• Familiarity with application and API security testing tools such as Burp Suite
• Understanding of CI/CD pipelines, software development processes, and security integration throughout the SDLC
• Ability to assess security risks, analyze vulnerabilities, and provide practical remediation recommendations
• Strong analytical, problem-solving, communication, and collaboration skills
• Relevant application security or cybersecurity certifications are advantageous