Senior Product Security Architect

Confidential; Kuala Lumpur; On-site; MYR 180,000 - 300,000; Full time

Job summary

Confidential is seeking a Security Architect to own the security design of our applications, APIs and supporting platforms. Within the Application Security team you will translate risk appetite into actionable architectural patterns for engineering teams and the Crypto division.

You will act as a senior technical authority on application security, driving secure-by-design principles across the product portfolio and collaborating with engineers, product managers and senior stakeholders to shape

Qualifications

• 8+ years in information security with architecture focus.
• Experience securing crypto, blockchain, or digital asset platforms.
• Excellent ability to translate risk into actionable architectural guidance.

Responsibilities

• Define and own the application security architecture vision, standards, and reference patterns across web, mobile, API, and cloud-hosted surfaces.
• Provide architectural guidance and security assurance on new products, major feature delivery, and significant changes including crypto custody and wallet infrastructure.
• Conduct security architecture reviews and threat modelling for new and existing applications, identifying risks and mitigations.
• Develop and maintain security design patterns, guardrails, and secure-by-default frameworks for the SDLC.
• Lead evaluation and selection of application security technologies and tooling.
• Collaborate with Cloud and Infrastructure teams to ensure secure deployment architectures across AWS and Azure and hybrid environments.
• Align application security architecture with regulatory obligations including DORA, PCI DSS, ISO and SOC.
• Represent the Application Security team in cross-functional architecture forums and governance bodies.

Skills

Security architecture

Application security

Threat modelling

Cloud security (AWS/Azure)

Blockchain/crypto security

Regulatory/compliance awareness

Tools

OWASP Top 10

MITRE ATT&CK

STRIDE/PASTA

Job description

Confidential is seeking a Security Architect to own the security design of our applications, APIs and supporting platforms. Within the Application Security team you will translate risk appetite into actionable architectural patterns for engineering teams and the Crypto division.

You will act as a senior technical authority on application security, driving secure-by-design principles across the product portfolio and collaborating with engineers, product managers and senior stakeholders to shape