Senior Engineer - Application Security

Axonect; Kuala Lumpur; On-site; MYR 100,000 - 180,000; Full time

Job summary

Axonect in Malaysia is seeking an experienced Application Security Engineer to strengthen our SDLC with secure coding, DevSecOps practices, and comprehensive security testing across web apps and APIs. You will lead vulnerability assessments, oversee SAST/DAST/SCA tooling, and collaborate with developers, DevOps, cloud teams, and stakeholders to embed security into every release.

The role requires hands-on security testing, OWASP familiarity, secure design reviews, and remediation in real-world

Qualifications

• 4+ years of relevant experience in application security, DevSecOps, or software security engineering
• Strong understanding of OWASP standards, secure coding practices, and common application vulnerabilities
• Hands-on experience with SAST, DAST, SCA, secret scanning, and container security tools
• Familiarity with application and API security testing tools such as Burp Suite
• Understanding of CI/CD pipelines, software development processes, and security integration throughout the SDLC
• Ability to assess security risks, analyze vulnerabilities, and provide practical remediation recommendations
• Strong analytical, problem-solving, communication, and collaboration skills
• Relevant application security or cybersecurity certifications are advantageous

Responsibilities

• Integrate security requirements, controls, and testing into the Software Development Life Cycle (SDLC) and DevSecOps pipelines
• Manage and support application security tools, including SAST, DAST, SCA, secret scanning, and container security scanning solutions
• Conduct web application and API security assessments to identify vulnerabilities and potential risks
• Review application architectures and designs, recommending secure design practices and improvements
• Establish secure coding standards, guidelines, and developer security awareness initiatives
• Validate security controls before production releases and support secure application deployments
• Perform vulnerability triage, validate false positives, and track remediation activities
• Monitor emerging application security threats and recommend improvements to security practices
• Collaborate with developers, DevOps engineers, cloud teams, and project stakeholders throughout the SDLC

Skills

Analytical skills

Problem-solving

Communication skills

Collaboration

Tools

SAST tools

DAST tools

SCA tools

Secret scanning tools

Container security tools

Burp Suite

Job description

Key Responsibilities

• Integrate security requirements, controls, and testing into the Software Development Life Cycle (SDLC) and DevSecOps pipelines
• Manage and support application security tools, including SAST, DAST, SCA, secret scanning, and container security scanning solutions
• Conduct web application and API security assessments to identify vulnerabilities and potential risks
• Review application architectures and designs, recommending secure design practices and improvements
• Establish secure coding standards, guidelines, and developer security awareness initiatives
• Validate security controls before production releases and support secure application deployments
• Perform vulnerability triage, validate false positives, and track remediation activities
• Monitor emerging application security threats and recommend improvements to security practices
• Collaborate with developers, DevOps engineers, cloud teams, and project stakeholders throughout the SDLC

Person Specifications

• 4+ years of relevant experience in application security, DevSecOps, or software security engineering
• Strong understanding of OWASP standards, secure coding practices, and common application vulnerabilities
• Hands-on experience with SAST, DAST, SCA, secret scanning, and container security tools
• Familiarity with application and API security testing tools such as Burp Suite
• Understanding of CI/CD pipelines, software development processes, and security integration throughout the SDLC
• Ability to assess security risks, analyze vulnerabilities, and provide practical remediation recommendations
• Strong analytical, problem-solving, communication, and collaboration skills
• Relevant application security or cybersecurity certifications are advantageous

Vendor submissions - 12 months