JobCubby JobCubby
Sign up
Axonect

Senior Engineer - Application Security

Axonect Kuala Lumpur, Kuala Lumpur, Malaysia

IT Services and IT Consulting · 1,001-5,000 employees

3 h ago
security Mid (2-5 yrs) Contractor Malaysia
Create a free account to apply — email only, no card. You can also save this posting or score it against your profile with AI.

Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.

About the role

Integrate security controls and testing into the SDLC and DevSecOps pipelines while managing application security tools. Conduct vulnerability assessments, establish secure coding standards, and collaborate with cross-functional teams to ensure secure deployments.

What they look for

Application Security DevSecOps SAST DAST SCA Secret Scanning Container Security OWASP Secure Coding Vulnerability Assessment API Security CI/CD Pipelines Burp Suite Vulnerability Triage Software Development Life Cycle

Requirements

Requires 4+ years of experience in application security or software security engineering. Candidates must have strong knowledge of OWASP standards, CI/CD pipelines, and hands-on experience with various security scanning tools.

Full description

Key Responsibilities

  • Integrate security requirements, controls, and testing into the Software Development Life Cycle (SDLC) and DevSecOps pipelines
  • Manage and support application security tools, including SAST, DAST, SCA, secret scanning, and container security scanning solutions
  • Conduct web application and API security assessments to identify vulnerabilities and potential risks
  • Review application architectures and designs, recommending secure design practices and improvements
  • Establish secure coding standards, guidelines, and developer security awareness initiatives
  • Validate security controls before production releases and support secure application deployments
  • Perform vulnerability triage, validate false positives, and track remediation activities
  • Monitor emerging application security threats and recommend improvements to security practices
  • Collaborate with developers, DevOps engineers, cloud teams, and project stakeholders throughout the SDLC

Person Specifications

  • 4+ years of relevant experience in application security, DevSecOps, or software security engineering
  • Strong understanding of OWASP standards, secure coding practices, and common application vulnerabilities
  • Hands-on experience with SAST, DAST, SCA, secret scanning, and container security tools
  • Familiarity with application and API security testing tools such as Burp Suite
  • Understanding of CI/CD pipelines, software development processes, and security integration throughout the SDLC
  • Ability to assess security risks, analyze vulnerabilities, and provide practical remediation recommendations
  • Strong analytical, problem-solving, communication, and collaboration skills
  • Relevant application security or cybersecurity certifications are advantageous

Vendor submissions - 12 months

Similar roles