Senior Security Engineer

DK Limited; Kuala Lumpur; On-site; MYR 51,000 - 76,000; Full time

Benefits offered by this job

Competitive compensation

Security ownership

Dynamic team

Job summary

DK Bank is a Bhutanese financial institution redefining banking for the digital age. This role focuses on endpoint security, hands-on security testing, vulnerability management, and coordinating with external vendors.

You will own EDR/XDR, perform internal pentests, and drive remediation with engineering teams. Ideal candidates have hands-on experience in penetration testing or security engineering, familiarity with CrowdStrike or Defender, and strong Linux/Windows/macOS knowledge.

Qualifications

• Hands-on experience in penetration testing, offensive security, or security engineering.
• Experience with endpoint security and EDR/XDR platforms such as CrowdStrike or Microsoft Defender.
• Strong understanding of Linux, Windows/macOS, networking, authentication, and common attack techniques.
• Experience testing web applications and APIs.
• Familiarity with AWS, IAM, Kubernetes, and cloud infrastructure.
• Scripting skills in Python, Go, Bash, or similar.
• Comfortable working independently and building security processes from the ground up.

Responsibilities

• Own endpoint security across employee devices and servers, including EDR/XDR, hardening, and privileged access.
• Perform internal penetration testing across applications, APIs, cloud infrastructure, and internal systems.
• Validate vulnerabilities and drive remediation with engineering teams.
• Coordinate external penetration tests, security assessments, and vendors.
• Own vulnerability tracking and remediation follow-through.
• Support targeted security reviews, incident response, and security automation.

Skills

Penetration testing

Offensive security

Security engineering

Endpoint security

EDR/XDR

Cloud infrastructure

Linux

Windows/macOS

Networking

Python/Go/Bash

CrowdStrike

Microsoft Defender

AWS

Kubernetes

Tools

CrowdStrike

Microsoft Defender

AWS

Kubernetes

Job description

DK Bank is a leading Bhutanese financial institution and the official bank of Gelephu Mindfulness City, redefining banking for the digital age while expanding its global presence.

Role

You'll help build our internal security capability across digital banking, payments, core banking, internal infrastructure, and partner-facing APIs.

Your primary focus will be endpoint security, hands-on security testing, vulnerability management, and coordination with external security vendors.

What you'll do

• Own endpoint security across employee devices and servers, including EDR/XDR, hardening, and privileged access
• Perform internal penetration testing across applications, APIs, cloud infrastructure, and internal systems
• Validate vulnerabilities and drive remediation with engineering teams
• Coordinate external penetration tests, security assessments, and vendors
• Own vulnerability tracking and remediation follow-through
• Support targeted security reviews, incident response, and security automation

What you bring

• Strong hands-on experience in penetration testing, offensive security, or security engineering
• Experience with endpoint security and EDR/XDR platforms such as CrowdStrike or Microsoft Defender
• Strong understanding of Linux, Windows/macOS, networking, authentication, and common attack techniques
• Experience testing web applications and APIs
• Familiarity with AWS, IAM, Kubernetes, and cloud infrastructure
• Scripting skills in Python, Go, Bash, or similar
• Comfortable working independently and building security processes from the ground up

What we offer

• Competitive compensation from a sovereign-backed fintech
• Real security ownership across a national bank's entire stack
• A dynamic, passionate team and a conducive work environment