Application Security Engineer

Security that moves as fast as modern development

Build a global career in application security while staying rooted in Malaysia. Modern systems move fast-and security has to move faster. This role puts you at the core of building secure, resilient applications that support global operations, where proactive testing and smart automation make all the difference. Make your mark by shaping security where it matters most-early, consistently, and at scale.

Job Description

As an Application Security Engineer, you will integrate security into the SDLC through SAST, DAST, and SCA, support CI/CD pipelines, and partner with development teams to identify, prioritize, and remediate application risks-ensuring secure, compliant, and reliable software delivery.

Job Overview

Employment type: Full-time

Shift: Day shift | Flexible shift

Work setup: Hybrid, Kuala Lumpur, Malaysia

Exciting Perks Await!

• Hybrid work arrangement
• Day shift schedule
• Fixed weekends off
• Government benefits
• Eight (8) days annual leave
• Career growth opportunities
• Diverse and supportive work environment
• Unlimited upskilling through Emapta Academy courses

The Qualifications We Seek

Education

• Bachelor's degree in Computer Science, Cybersecurity, or a related field (or equivalent experience)

Experience

• Minimum of 3 years of experience in application security, secure coding, or DevSecOps roles

Knowledge and Skills

• Strong understanding of CI/CD tools (GitLab CI, Azure DevOps, Jenkins)
• Hands-on experience with application security testing tools, including:
• SAST (SonarQube, Fortify, Checkmarx)
• DAST (OWASP ZAP, Burp Suite)
• SCA (Snyk, WhiteSource, OWASP Dependency-Check)
• Strong knowledge of OWASP Top 10 and common application attack vectors
• Familiarity with secure coding practices in JavaScript, Python, .NET, or Java
• Experience with infrastructure-as-code and container security (Docker, Kubernetes)
• Working knowledge of REST API security and authentication standards (OAuth, SAML, OpenID)

Your Daily Tasks

Security Testing & Assessment

• Integrate security controls and automated checks into CI/CD pipelines to support a secure SDLC
• Lead and conduct security testing for application releases, including manual code reviews when necessary
• Build, manage, and maintain DevSecOps tool integrations and automation scripts
• Evaluate and implement open-source or commercial application security tools

Secure Software Development Lifecycle (SSDLC)

• Perform Static Application Security Testing (SAST)
• Perform Dynamic Application Security Testing (DAST)
• Conduct Software Composition Analysis (SCA)

Risk Assessment & Threat Modeling

• Assist with threat modelling and security design reviews for in-house applications
• Maintain a risk-based prioritization matrix for identified vulnerabilities

Compliance & Standards

• Define and enforce secure coding standards and best practices
• Support audit and compliance reporting related to application security (SOC 2, ISO 27001, PCI-DSS)

Collaboration and Education

• Work closely with developers and DevOps teams to embed security into application design and deployment
• Coordinate vulnerability management and remediation tracking
• Collaborate with the Release Manager to enforce security gate checks prior to production

Other Responsibilities

• Perform administrative or non-administrative duties as assigned through written or verbal instructions

Welcome to Emapta Malaysia!

Join Emapta, with a 50/50 gender ratio and a culture rooted in care and empathy, you'll feel valued from day one. We're committed to growing talent and setting you up for success.

Be part of a team that showcases excellence to the world. With 20 offices across 11 countries and 1,000+ clients, you'll create real impact every day-whether you work from home or on-site. Our 100% virtual recruitment process makes it easy to get started.

At Emapta, you're not just joining a company-you're becoming part of a thriving community of 10,000+ professionals growing careers with purpose. And behind every partnership we build is a deep respect for people and the impact they make.

We place integrity at the heart of everything we do and truly value the human experience. That's why, for clients, it's a profound and transformational process that gives them the opportunity to achieve the business growth they desire.

Tim Vorbach, CEO

#EmaptaEra