Encora

Lead Application Security Engineer

Kuala Lumpur · Work style not stated

Apply on the employer’s site ↗See how well you match this job

You apply directly with the employer. ROLIVA does not submit applications from this page and is not the employer.

About the role

Description from the employer’s posting. Check the employer’s page for the current version.

EmployerEncora
LocationKuala Lumpur
Work styleWork style not stated
Employer posted3 months ago

Key Responsibilities:
● Threat Modeling: Lead design reviews for new banking features (Payments, Transfers,
KYC). Identify logic flaws before code is written.
● Pipeline Automation: Architect and maintain the SAST/DAST/SCA tooling in the CI/CD
pipeline (e.g., SonarQube, Snyk, GitLab CI) to block vulnerabilities automatically.
● Code Review: Perform manual code audits on high-risk components (Authentication,
Ledger logic) in Java, Kotlin, or Swift.
● Cloud & AI Patterns: Deliver API, container, cloud, and AI security design patterns.
Ensure that developers have "paved roads" (secure templates) for deploying
microservices and AI models.
● Culture: Act as a mentor to the development team, running secure coding workshops and
championing a "Security Champion" program.

Technical Requirements:
● 5+ years in Application Security with a background in Software Development.
● Proficiency in at least one core language: Java (Spring Boot), Node.js, or Go.
● Deep understanding of OWASP Top 10 and SANS Top 25.
● Experience with CI/CD integration (Jenkins, GitHub Actions).
● Bonus: Experience in Fintech or Banking.

See how well you match this job Apply on the employer’s site ↗

Check your resume against this job Free, no sign-up. Nothing you paste is stored.

Staying safe while you apply

Never pay to apply, interview or accept an offer. ROLIVA never asks you for payment to apply to a job.
Apply only through the official “Apply on the employer’s site” button, on the employer’s own site, and check that a recruiter’s email uses that employer’s own domain rather than a free email address.
Be cautious of an offer made with no real interview, or pressure to decide quickly or share financial details early.

Does something look wrong with this listing? Use “Report broken link” in the role details, or read ROLIVA’s full job-safety guidance ↗.

Preparing for this role with ROLIVA

Check the fit.
Compare the requirements with the experience you have confirmed, including gaps.
Prepare honestly.
Build interview stories and application drafts from your own evidence.
Keep track.
Save the role and record your own application status and follow-ups.

Create a free workspace or log in.