Senior Secure Code Engineer - Vulnerability Remediation

Carsome; Selangor; On-site; MYR 180,000 - 260,000; Full time

Benefits offered by this job

Dental insurance

Health insurance

Maternity leave

Opportunities for promotion

Parental leave

Professional development

Job summary

Jora Malaysia is seeking a senior software security engineer to lead remediation of vulnerabilities across Web and API surfaces. You will work from vulnerability and pentest reports to implement fixes in production code and guide secure development practices.

Strong experience with OWASP top 10, CI/CD security, and bug bounty triage will be highly valued. Familiarity with containerized environments and Kubernetes is a plus.

Qualifications

• 5+ years of software engineering experience with full-stack skills — backend (Node.js/Go/Python/.NET/PHP/Rust/Ruby/Java or equivalent) and frontend (React/Vue/Angular/SolidJS or equivalent).
• Solid understanding of web and API vulnerability classes (OWASP Top 10, OWASP API Security Top 10) and how to fix them in code.
• Comfortable working from vulnerability scan reports, pentest reports, and bug bounty submissions to root-cause and fix issues.
• Familiarity with CI/CD pipelines and resolving findings from embedded SAST/SCA/DAST tooling.
• Experience with bug bounty programs and triaging external researcher submissions is a bonus.
• Familiarity with Kubernetes and containerized application environments is a bonus.

Responsibilities

• Own end-to-end remediation of vulnerabilities identified through Web, API, Bug Bounty submissions, and external penetration tests.
• Write and ship code-level fixes for application vulnerabilities directly in relevant codebases.
• Triage findings from security tools to validate true positives and prioritize based on exploitability and business risk.
• Work with development teams to remediate findings that require broader application or architecture changes, providing secure coding guidance and reviewing fixes before closure.
• Maintain sprint-based remediation tracking and burn-down reporting for vulnerability backlogs.
• Fix vulnerabilities surfaced by security tooling embedded in our CI/CD pipelines as part of the regular development workflow.
• Build lightweight internal tooling/scripts to help automate triage, tracking, or reporting of vulnerability and posture data.

Skills

Full-stack development

Backend development

Frontend development

Vulnerability remediation

OWASP knowledge

CI/CD

Bug bounty experience

Kubernetes

Tools

GitHub/GitLab/Bitbucket

SAST/SCA/DAST tooling

CI/CD tooling

Bug bounty platforms

Containerization (Kubernetes)

Job description

Jora Malaysia is seeking a senior software security engineer to lead remediation of vulnerabilities across Web and API surfaces. You will work from vulnerability and pentest reports to implement fixes in production code and guide secure development practices.

Strong experience with OWASP top 10, CI/CD security, and bug bounty triage will be highly valued. Familiarity with containerized environments and Kubernetes is a plus.