Lead Application Security Engineer
EncoraKuala Lumpur
- Role type
- Experienced
- Track
- Software
- Experience
- 5+ yrs
- Posted
- · first seen Oct 18, 2026
This posting does not say whether the role sponsors visas. Unconfirmed means unknown, not no. Ask the recruiter early.
The label is what this posting says; Encora's USCIS H-1B history covers US work visas only, so it says nothing about this role's location.
Job description
Key Responsibilities:
● Threat Modeling: Lead design reviews for new banking features (Payments, Transfers,
KYC). Identify logic flaws before code is written.
● Pipeline Automation: Architect and maintain the SAST/DAST/SCA tooling in the CI/CD
pipeline (e.g., SonarQube, Snyk, GitLab CI) to block vulnerabilities automatically.
● Code Review: Perform manual code audits on high-risk components (Authentication,
Ledger logic) in Java, Kotlin, or Swift.
● Cloud & AI Patterns: Deliver API, container, cloud, and AI security design patterns.
Ensure that developers have "paved roads" (secure templates) for deploying
microservices and AI models.
● Culture: Act as a mentor to the development team, running secure coding workshops and
championing a "Security Champion" program.
Technical Requirements:
● 5+ years in Application Security with a background in Software Development.
● Proficiency in at least one core language: Java (Spring Boot), Node.js, or Go.
● Deep understanding of OWASP Top 10 and SANS Top 25.
● Experience with CI/CD integration (Jenkins, GitHub Actions).
● Bonus: Experience in Fintech or Banking.
Source: job-boards.greenhouse.io · Malaysia Team · Listing 5170333007
Fit check
Your resume against this posting. Works without an AI key; sharper with one.