Senior Full-Stack Security Engineer – Vulnerability Remediation

Carsome; Selangor; On-site; MYR 180,000 - 240,000; Full time

Benefits offered by this job

Dental insurance

Health insurance

Maternity leave

Opportunities for promotion

Parental leave

Professional development

Job summary

Jora Malaysia is seeking a senior software engineer with 5+ years of fullstack experience to read, patch, and secure production code across the stack. You will work on backend and frontend, ensuring robust defenses against vulnerabilities and security issues.

Role requires practical OWASP Top 10 knowledge, ability to act on vulnerability and bug bounty reports, and familiarity with CI/CD pipelines and containerized environments.

Qualifications

• 5+ years of software engineering with fullstack skills across backend and frontend.
• Solid understanding of web/API vulnerability classes (OWASP Top 10) and fixes.
• Able to work from vulnerability/bounty reports to root-cause and fix issues.
• Familiar with CI/CD pipelines and embedded SAST/SCA/DAST tooling in development.
• Experience with bug bounty programs and triaging external submissions is a bonus.
• Familiarity with Kubernetes and containerized environments is a bonus.

Responsibilities

• Own end-to-end remediation of vulnerabilities from Web, API, Bug Bounty submissions and external tests.
• Write and ship code fixes for vulnerabilities directly in codebases (GitHub/GitLab/Bitbucket).
• Triage findings from security tools to prioritize based on risk and exploitability.
• Work with development teams to remediate findings requiring architecture changes.
• Maintain sprint-based remediation tracking and burn-down reporting.
• Fix vulnerabilities surfaced by CI/CD tooling to keep the pipeline green.
• Build lightweight tooling to automate triage, tracking, or reporting.

Skills

Fullstack software engineering

OWASP Top 10 knowledge

Bug bounty familiarity

CI/CD & SAST/DAST

Kubernetes familiarity

Tools

GitHub/GitLab/Bitbucket

Job description

Jora Malaysia is seeking a senior software engineer with 5+ years of fullstack experience to read, patch, and secure production code across the stack. You will work on backend and frontend, ensuring robust defenses against vulnerabilities and security issues.

Role requires practical OWASP Top 10 knowledge, ability to act on vulnerability and bug bounty reports, and familiarity with CI/CD pipelines and containerized environments.