Senior Product Security Architect - Crypto & Cloud

Confidential Careers; Kuala Lumpur; On-site; MYR 180,000 - 240,000; Full time

Job summary

Confidential Careers in Malaysia seeks a Security Architect to own the security design of applications, APIs, and supporting platforms. You will drive secure-by-design patterns within the Application Security team and Crypto division, influencing engineers, PMs and senior stakeholders.

You will lead threat modelling, security reviews, and guardrails, collaborating with Risk & Compliance to align with DORA, PCI DSS, ISO and SOC, across AWS, Azure and hybrid deployments.

Qualifications

• 8+ years of information security experience with at least 3 years in security architecture or principal/staff security engineering.
• Deep expertise in application security across web, mobile, API, and microservices; prior crypto/ blockchain security experience is a plus.
• Strong knowledge of vulnerability classes and secure-by-design patterns; familiarity with blockchain threat vectors and mitigations.

Responsibilities

• Define and own the application security architecture vision, standards, and reference patterns across web, mobile, API, and cloud surfaces.
• Provide architecture guidance and security assurance on new products and major feature deliveries, including crypto-related systems.
• Conduct security architecture reviews and threat modelling for new and existing applications; identify risks and mitigations.

Skills

Application Security

Threat Modelling

Cloud Security

Blockchain Security

Security Architecture

Communication

Education

CISSP / CSSLP / CCSP

Bachelor's degree in CS/IS or related

Tools

AWS/Azure/GCP

OWASP Top 10

Job description

Confidential Careers in Malaysia seeks a Security Architect to own the security design of applications, APIs, and supporting platforms. You will drive secure-by-design patterns within the Application Security team and Crypto division, influencing engineers, PMs and senior stakeholders.

You will lead threat modelling, security reviews, and guardrails, collaborating with Risk & Compliance to align with DORA, PCI DSS, ISO and SOC, across AWS, Azure and hybrid deployments.