Lead Application Security Engineer
Encora
| Company | Encora |
| Category | Engineering |
| Location | Kuala Lumpur |
| Remote | On-site (inferred) |
| Employment | Not stated |
| Level | Lead |
| Salary | Not stated by the employer |
| Posted | 22 Jun 2026 |
| Last verified | 30 Jul 2026 |
| Source | Employer career page (greenhouse) |
Description
Key Responsibilities: ● Threat Modeling: Lead design reviews for new banking features (Payments, Transfers, KYC). Identify logic flaws before code is written. ● Pipeline Automation: Architect and maintain the SAST/DAST/SCA tooling in the CI/CD pipeline (e.g., SonarQube, Snyk, GitLab CI) to block vulnerabilities automatically. ● Code Review: Perform manual code audits on high-risk components (Authentication, Ledger logic) in Java, Kotlin, or Swift. ● Cloud & AI Patterns: Deliver API, container, cloud, and AI security design patterns. Ensure that developers have "paved roads" (secure templates) for deploying microservices and AI models. ● Culture: Act as a mentor to the development team, running secure coding workshops and championing a "Security Champion" program.
Technical Requirements: ● 5+ years in Application Security with a background in Software Development. ● Proficiency in at least one core language: Java (Spring Boot), Node.js, or Go. ● Deep understanding of OWASP Top 10 and SANS Top 25. ● Experience with CI/CD integration (Jenkins, GitHub Actions). ● Bonus: Experience in Fintech or Banking.
995,367 openings. Erioun finds yours.Scored against your own profile, every hour.Try the radar →