Randstad Malaysia Hiring! Full Time Senior Application Security Specialist in Federal Territory - Ricebowl

about the company
A global financial messaging leader providing secure, reliable network infrastructure and communication services across the banking and financial ecosystem. The organization operates on a hybrid working model , driving high-security standards across international cross-functional teams.

about the job
As a Senior Application Security Specialist (Defensive / AppSec Architect), you will focus strictly on defensive application security, threat modeling, and embedding security architecture into the SDLC prior to deployment. This role works autonomously to translate business needs into robust security requirements across global agile teams, reporting to a Europe-based leadership structure.

• Security Architecture & Threat Modeling: Conduct risk analysis, design mitigations (e.g., access control, SSO implementation, secrets protection), and define enterprise security requirements across the SDLC.

• DevSecOps & CI/CD Security Integration: Automate and manage security testing frameworks within modern Agile pipelines.

• Remediation & Vulnerability Management: Apply deep knowledge of the OWASP Top 10 to engineer practical mitigation and remediation strategies rather than simply reporting flaws.

• Standard Setting & Autonomy: Establish and upgrade application security guidelines based on data classification, risk appetite, and business requirements.
  

• Defensive AppSec Focus: Proven background in defensive application security and security architecture (Note: Pure penetration testing, red teaming, and network/SOC profiles will NOT be considered).

• Technical Expertise: Hands-on domain expertise in at least one core testing area: SAST, DAST, SCA, or API Security.

• Identity & Secrets Protection: Practical architecture knowledge in IAM, Single Sign-On (SSO), and secrets management.

• Autonomy & Leadership: Self-directed mindset capable of establishing security baselines and influencing developers without requiring step-by-step guidance.

• Eligibility & Location: Must be a local candidate