Senior Security Architect - App & Crypto Platform Design

Confidential; Kuala Lumpur; On-site; MYR 180,000 - 260,000; Full time

Job summary

Confidential in Malaysia seeks a Security Architect to define and own the security design of applications, APIs, and platforms, within the Application Security team and Crypto division. You will translate risk appetite into architectural patterns and drive secure-by-design principles across the portfolio.

You will lead threat modelling, security reviews, and tooling evaluations, collaborating with engineers, product managers, and senior stakeholders to ensure cloud-native and hybrid setups meet

Qualifications

• 8+ years in information security with at least 3 years in security architecture or principal/staff security engineering.
• Deep expertise in application security architecture across web, mobile, API, and microservices, with crypto/digital asset experience.
• Strong knowledge of OWASP Top 10 and blockchain-specific threat vectors and mitigations.
• Experience designing secure cloud-native and hybrid architectures (AWS/Azure/GCP).
• Proficiency in threat modelling methodologies (STRIDE/PASTA/MITRE ATT&CK).
• Familiarity with regulatory frameworks such as DORA, PCI-DSS, ISO, SOC; excellent communication skills.

Responsibilities

• Define and own the application security architecture vision, standards, and reference patterns across surfaces.
• Provide architectural guidance and security assurance on new products, features, and crypto-related platforms.
• Conduct security architecture reviews and threat modelling for new and existing applications.
• Develop and maintain security design patterns, guardrails, and secure-by-default frameworks for SDLC adoption.
• Lead evaluation of security technologies and tooling to align with architectural principles.
• Partner with Cloud and Infrastructure teams to ensure secure deployment architectures across cloud and hybrid environments.
• Collaborate with Risk & Compliance to align architecture with regulatory obligations including DORA, PCI DSS, ISO and SOC.
• Represent the Application Security team in cross-functional architecture forums and governance bodies.

Skills

Application security

Threat modelling

Cloud security

Blockchain security

Regulatory compliance

Communication

Certifications

Software engineering

English fluency

Education

Bachelor's degree in Computer Science or related field

Job description

Confidential in Malaysia seeks a Security Architect to define and own the security design of applications, APIs, and platforms, within the Application Security team and Crypto division. You will translate risk appetite into architectural patterns and drive secure-by-design principles across the portfolio.

You will lead threat modelling, security reviews, and tooling evaluations, collaborating with engineers, product managers, and senior stakeholders to ensure cloud-native and hybrid setups meet