Senior Executive Engineer Application Security

MindMerge Consulting; Petaling Jaya; On-site; MYR 120,000 - 180,000; Full time

Job summary

MindMerge Consulting is seeking a Senior Executive Engineer Application Security in Petaling Jaya, Malaysia. The role focuses on embedding security into application development and deployment to enable secure software delivery.

You will integrate security into SDLC and DevSecOps, manage security tools (SAST, DAST, SCA, secret scanning, container security), perform web app/API assessments, and collaborate with developers and cloud teams to strengthen the organization's security posture.

Qualifications

• 3–10 years of experience in application security.
• Experience integrating security into SDLC/DevSecOps.
• Familiar with SAST/DAST/SCA and secret scanning.
• Ability to assess web apps and APIs for security risks.

Responsibilities

• Integrate security requirements into SDLC and DevSecOps pipelines.
• Manage and support SAST, DAST, SCA and secret scanning tools.
• Perform application security assessments of web apps and APIs.
• Review architecture to identify security risks and recommend secure design.
• Establish secure coding standards and developer security awareness.
• Support secure deployment and validate security controls before release.
• Triage vulnerabilities, validate false positives, and track remediation.
• Monitor emerging threats and propose improvements to security posture.
• Collaborate with developers, DevOps, cloud teams and project teams.

Skills

Secure SDLC

DevSecOps

Threat modeling

Tools

SAST

DAST

SCA

secret scanning

container security scanning

Job description

Petaling Jaya, Malaysia

Our client is a well known leading IT provider in Malaysia and currently looking for a Senior Executive Engineer Application Security.

Role Overview: Embed security intoapplication development and deployment processes while enabling secure softwaredelivery.

Key Responsibilities

• I ntegrate security requirements, controls and testingactivities into the Software Development Life Cycle (SDLC) and DevSecOpspipelines.
• Manage and support application security tools, including SAST,DAST, SCA, secret scanning, and container security scanning solutions.
• Perform application security assessments, including web app andAPI.
• Review application architecture and design to identify securityrisks and recommend secure design practices.
• Establish and maintain secure coding standards, guidelines, anddeveloper security awareness programs.
• Support secure application deployment activities and validatesecurity controls before production release.
• Perform vulnerability triage, false-positive validation, andremediation tracking for application security findings.
• Monitor emerging application security threats and recommendimprovements to strengthen the organization's application securityposture.
• Work closely with developers, DevOps engineers, cloud teams,and project teams throughout the SDLC.

Requirements

• Working Experience: 3-10 years