Role Overview: Embed security into application development and deployment processes while enabling secure software delivery.
Key Responsibilities:
- Integrate security requirements, controls and testing activities into the Software Development Life Cycle (SDLC) and DevSecOps pipelines.
- Manage and support application security tools, including SAST, DAST, SCA, secret scanning, and container security scanning solutions.
- Perform application security assessments, including web app and API.
- Review application architecture and design to identify security risks and recommend secure design practices.
- Establish and maintain secure coding standards, guidelines, and developer security awareness programs.
- Support secure application deployment activities and validate security controls before production release.
- Perform vulnerability triage, false-positive validation, and remediation tracking for application security findings.
- Monitor emerging application security threats and recommend improvements to strengthen the organization's application security posture.
- Work closely with developers, DevOps engineers, cloud teams, and project teams throughout the SDLC.
Job Requirements:
- Experience: 3–10 years in application security, cybersecurity, or DevSecOps.
- Hands-on experience integrating security controls into SDLC and CI/CD pipelines.
- Knowledge of SAST, DAST, SCA, secret scanning, and container security scanning tools.
- Experience conducting web application and API security assessments.
- Strong understanding of OWASP Top 10 and secure coding practices.
- Experience reviewing application architecture and identifying security risks.
- Knowledge of application security tools such as Burp Suite and other security testing solutions.
- Experience in vulnerability assessment, false-positive validation, and remediation tracking.
- Ability to establish secure coding guidelines and support developer security awareness.
- Experience collaborating with developers, DevOps, and cloud teams to ensure secure application deployment.
- Knowledge of application security threats, vulnerability management, and security best practices.
Employment Details:
- Salary: Negotiable depending on experience and skillset
- Job Type: Permanent
- Location: Persiaran Barat, Seksyen 52 Petaling Jaya, 46200 Petaling Jaya, Selangor
- Working Hours: Monday to Friday, 40 hours per week
Pay: RM9,000.00 - RM16,000.00 per month
Benefits:
- Health insurance
- Opportunities for promotion
- Professional development
Work Location: In person