Job Opportunities API

The Public Ledger of Openings

← Back to the ledger

Lead Application Security Engineer

Encora
CompanyEncora
CategoryEngineering
LocationKuala Lumpur
RemoteOn-site (inferred)
EmploymentNot stated
LevelLead
SalaryNot stated by the employer
Posted22 Jun 2026
Last verified30 Jul 2026
SourceEmployer career page (greenhouse)
Applications are handled by the employer, not by us.Apply on the employer's site →
Description
Key Responsibilities:  ● Threat Modeling: Lead design reviews for new banking features (Payments, Transfers,  KYC). Identify logic flaws before code is written.  ● Pipeline Automation: Architect and maintain the SAST/DAST/SCA tooling in the CI/CD  pipeline (e.g., SonarQube, Snyk, GitLab CI) to block vulnerabilities automatically.  ● Code Review: Perform manual code audits on high-risk components (Authentication,  Ledger logic) in Java, Kotlin, or Swift.  ● Cloud & AI Patterns: Deliver API, container, cloud, and AI security design patterns.  Ensure that developers have "paved roads" (secure templates) for deploying  microservices and AI models.  ● Culture: Act as a mentor to the development team, running secure coding workshops and  championing a "Security Champion" program.  Technical Requirements:  ● 5+ years in Application Security with a background in Software Development.  ● Proficiency in at least one core language: Java (Spring Boot), Node.js, or Go.  ● Deep understanding of OWASP Top 10 and SANS Top 25.  ● Experience with CI/CD integration (Jenkins, GitHub Actions).  ● Bonus: Experience in Fintech or Banking.
HOUSE AD995,367 openings. Erioun finds yours.Scored against your own profile, every hour.Try the radar →