Posted 22 Jun 2026 · Engineering
Job description
Key Responsibilities:
● Threat Modeling: Lead design reviews for new banking features (Payments, Transfers,
KYC). Identify logic flaws before code is written.
● Pipeline Automation: Architect and maintain the SAST/DAST/SCA tooling in the CI/CD
pipeline (e.g., SonarQube, Snyk, GitLab CI) to block vulnerabilities automatically.
● Code Review: Perform manual code audits on high-risk components (Authentication,
Ledger logic) in Java, Kotlin, or Swift.
● Cloud & AI Patterns: Deliver API, container, cloud, and AI security design patterns.
Ensure that developers have "paved roads" (secure templates) for deploying
microservices and AI models.
● Culture: Act as a mentor to the development team, running secure coding workshops and
championing a "Security Champion" program.
Technical Requirements:
● 5+ years in Application Security with a background in Software Development.
● Proficiency in at least one core language: Java (Spring Boot), Node.js, or Go.
● Deep understanding of OWASP Top 10 and SANS Top 25.
● Experience with CI/CD integration (Jenkins, GitHub Actions).
● Bonus: Experience in Fintech or Banking.
Pay, skills & work eligibility
Compensation
A clear compensation amount was not identified. Ask the employer for the range, currency, pay period and whether it covers base pay or total compensation.
Location, eligibility & working hours
- Listed work location
- Kuala Lumpur
- Visa sponsorship
- Not stated clearly
- Relocation support
- Not stated clearly
- Working hours / time zone
- Not stated clearly
Remote does not automatically mean work from any country. A location match does not confirm work authorization, sponsorship or relocation eligibility.
Requirements at a glance
Named skills identified in the listing. A mention is not always a requirement; read the full description and employer conditions.