inhousefyi
← Back to listings

Lead Application Security Engineer

EncoraKuala Lumpur, Malaysia · Posted 2 months ago
Full-time
Apply now

Description

Key Responsibilities:
● Threat Modeling: Lead design reviews for new banking features (Payments, Transfers,
KYC). Identify logic flaws before code is written.
● Pipeline Automation: Architect and maintain the SAST/DAST/SCA tooling in the CI/CD
pipeline (e.g., SonarQube, Snyk, GitLab CI) to block vulnerabilities automatically.
● Code Review: Perform manual code audits on high-risk components (Authentication,
Ledger logic) in Java, Kotlin, or Swift.
● Cloud & AI Patterns: Deliver API, container, cloud, and AI security design patterns.
Ensure that developers have "paved roads" (secure templates) for deploying
microservices and AI models.
● Culture: Act as a mentor to the development team, running secure coding workshops and
championing a "Security Champion" program.

Technical Requirements:
● 5+ years in Application Security with a background in Software Development.
● Proficiency in at least one core language: Java (Spring Boot), Node.js, or Go.
● Deep understanding of OWASP Top 10 and SANS Top 25.
● Experience with CI/CD integration (Jenkins, GitHub Actions).
● Bonus: Experience in Fintech or Banking.

Similar jobs

EncoraKuala Lumpur, Malaysia

Key Responsibilities 1. API & Ecosystem Architecture ● The API Fortress: Architect the security layer for our API Gateway (e.g., Kong, Apigee, AWS Gateway). Define global policies for Rate Limiting, Throttling, and A…

Full-time
EncoraKuala Lumpur, Malaysia

Key Responsibilities: ● API Logic Security: Hunt for Business Logic vulnerabilities (BOLA/IDOR, Mass Assignment) that traditional firewalls miss. ● Authentication & Authorization: Design and validate OAuth2, OIDC, an…

Full-time
EncoraKuala Lumpur, Malaysia

Key Responsibilities: ● App Hardening: Implement and maintain RASP (Runtime Application Self-Protection), Code Obfuscation (ProGuard/DexGuard), and Root/Jailbreak detection mechanisms. ● Secure Connectivity: Enforce Cert…

Full-time
EncoraKuala Lumpur, Malaysia

We are seeking a Mid-Level Java Spring Boot Developer with experience in the Banking or Financial Services domain to join our team. The ideal candidate should have hands-on experience developing scalable microservices-ba…

Full-time
EncoraKuala Lumpur, Malaysia

Role Summary: The IAM Operations & Access Review Support Analyst is responsible for executing day-to-day IAM operational activities, supporting access reviews, identity lifecycle management, privileged access adminis…

Full-time

Est. 152,500 USD

At Beyond Finance, we've made it our mission to help everyday Americans escape the endless cycle of crippling debt and step into a brighter financial future. Through compassionate, individualized care, a culture focused…

Full-timeRemote
Security Architect6 months ago
Transmit SecurityTel Aviv-Yafo, Gush Dan, Israel

Transmit Security gives businesses the modern tools they need to build secure, trusted and end-to-end digital identity journeys to innovate and grow. CX-focused, cybersecurity conscious leaders rely on Transmit Security’…

Full-time
EncoraSingapore, Singapore

Job Title - Cybersecurity Engineer Key Skills - Tenable Nessus Experience - 5+ years Location - Singapore Requirements At least 5 years of relevant experience in cybersecurity. Candidates with relevant certifications suc…

Full-time
Transmit SecurityTel Aviv-Yafo, Gush Dan, Israel

We offer the industry’s only platform that fuses customer identity and anti-fraud solutions – customer identity management, identity verification, and fraud prevention. We sell to industries with large, consumer-facing b…

Full-time
OktaBengaluru, India

Secure Every Identity, from AI to HumanIdentity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This…

Full-time
EncoraKuala Lumpur, Malaysia

We are seeking a hands-on Network Security Engineer to operate and continuously improve our network security stack—primarily enterprise firewalls (Palo Alto, Fortinet, Cisco), secure web gateways/proxies, and site-to-sit…

Full-time
StripeRemote

Est. 140,000 USD

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies - from the world’s largest enterprises to the most ambitious startups - use Stripe to accept payments, grow thei…

Full-timeRemote
EncoraKuala Lumpur, Malaysia

Responsibilities Participate in the end-to-end design, development, and deployment of complex software solutions, leveraging deep proficiency in Java. Collaborate closely with cross-functional teams—product managers, des…

Full-time
StripeToronto, Ontario, Canada

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies - from the world’s largest enterprises to the most ambitious startups - use Stripe to accept payments, grow thei…

Full-time
Hyphen Connect LimitedSingapore, Singapore

Join a dynamic security firm at the forefront of innovation, leveraging machine learning to detect on-chain threats in real-time. As a Product Manager specializing in AI and Web3 Security, you will define and execute the…

Full-time
Hyphen Connect LimitedTaipei, Taiwan

We are supporting an APAC-focused technology company building a non-custodial, protocol-level payment infrastructure that enables seamless on-chain settlement for API-based services. The project sits at the intersection…

Full-time
Beyond FinanceChicago, Illinois, United States

Est. 185,000 USD

At Beyond Finance, we've made it our mission to help everyday Americans escape the endless cycle of crippling debt and step into a brighter financial future. Through compassionate, individualized care, a culture focused…

Full-time

Est. 120,000 USD

We are working with a decentralised exchange which looks to innovate on providing the best of CEXs and DEXs, focusing on building a safe, simple and scalable platform for trading. They differentiate themselves by offerin…

Full-timeRemote

We are working with a decentralised exchange which looks to innovate on providing the best of CEXs and DEXs, focusing on building a safe, simple and scalable platform for trading. They differentiate themselves by offerin…

Full-timeRemote

We are working with a decentralised exchange which looks to innovate on providing the best of CEXs and DEXs, focusing on building a safe, simple and scalable platform for trading. They differentiate themselves by offerin…

Full-timeRemote

We are working with a decentralised exchange which looks to innovate on providing the best of CEXs and DEXs, focusing on building a safe, simple and scalable platform for trading. They differentiate themselves by offerin…

Full-timeRemote

We are working with a decentralised exchange which looks to innovate on providing the best of CEXs and DEXs, focusing on building a safe, simple and scalable platform for trading. They differentiate themselves by offerin…

Full-timeRemote

We are working with a decentralised exchange which looks to innovate on providing the best of CEXs and DEXs, focusing on building a safe, simple and scalable platform for trading. They differentiate themselves by offerin…

Full-timeRemote

We are working with a decentralised exchange which looks to innovate on providing the best of CEXs and DEXs, focusing on building a safe, simple and scalable platform for trading. They differentiate themselves by offerin…

Full-timeRemote

We are working with a decentralised exchange which looks to innovate on providing the best of CEXs and DEXs, focusing on building a safe, simple and scalable platform for trading. They differentiate themselves by offerin…

Full-timeRemote
Financial TimesLondon, United Kingdom

Est. 80,000 GBP

About Us The Financial Times is one of the world’s leading news organisations, globally recognised for its authority, integrity and accuracy, with a mission to deliver quality information and services worldwide. At the F…

Full-time
StripeSeattle, Washington, United States

Est. 175,000 USD

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world's largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their re…

Full-time
Transmit SecurityTel Aviv-Yafo, Gush Dan, Israel

Job Description : We offer the industry’s only platform that seamlessly integrates customer identity and anti-fraud solutions, including identity management, identity verification, and fraud prevention. Our solutions ser…

Full-time

Est. 177,500 USD

At Beyond Finance, we've made it our mission to help everyday Americans escape the endless cycle of crippling debt and step into a brighter financial future. Through compassionate, individualized care, a culture focused…

Full-timeRemote
Hyphen Connect LimitedSingapore, Singapore

Summary: Join a premier blockchain security firm trusted by top-tier DeFi protocols as a Blockchain Security Auditor. This role involves conducting manual code reviews to identify critical vulnerabilities, ensuring the s…

Full-time