全职 Application Security Engineer 工作, 薪水, Asia Recruit WP Kuala Lumpur 公司招聘中 - Ricebowl

Threat Modeling: Lead design reviews for new banking features (Payments, Transfers, KYC). Identify logic flaws before code is written.

Pipeline Automation: Architect and maintain the SAST/DAST/SCA tooling in the CI/CD pipeline (e.g., SonarQube, Snyk, GitLab CI) to block vulnerabilities automatically.

Code Review: Perform manual code audits on high-risk components (Authentication, Ledger logic) in Java, Kotlin, or Swift.

Culture: Act as a mentor to the development team, running secure coding workshops and championing a "Security Champion" program.