Lead Application Security Engineer
Encora, Kuala Lumpur
- Pay
- Not listed by the employer
- Work type
- Not stated
- Level
- Senior
- Area
- Security engineering
- Posted
- Jun 22, 2026
Check my fit
See how your résumé lines up with this role: where you match, what's missing, and lines worth rewording.
About the role
Key Responsibilities: ● Threat Modeling: Lead design reviews for new banking features (Payments, Transfers, KYC). Identify logic flaws before code is written. ● Pipeline Automation: Architect and maintain the SAST/DAST/SCA tooling in the CI/CD pipeline (e.g., SonarQube, Snyk, GitLab CI) to block vulnerabilities automatically. ● Code Review: Perform manual code audits on high-risk components (Authentication, Ledger logic) in Java, Kotlin, or Swift. ● Cloud & AI Patterns: Deliver API, container, cloud, and AI security design patterns. Ensure that developers have "paved roads" (secure templates) for deploying microservices and AI models. ● Culture: Act as a mentor to the development team, running secure coding workshops and championing a "Security Champion" program.
Technical Requirements: ● 5+ years in Application Security with a background in Software Development. ● Proficiency in at least one core language: Java (Spring Boot), Node.js, or Go. ● Deep understanding of OWASP Top 10 and SANS Top 25. ● Experience with CI/CD integration (Jenkins, GitHub Actions). ● Bonus: Experience in Fintech or Banking.
Similar roles at other companies
Pay not posted
Posted Oct 2, 2026
Lead Security Engineer
PrelimNew York +7
$240K–$260K / yr
Posted Sep 16, 2026
Security Engineer
DigitalBridgeBoca Raton, Florida +2
$235K–$290K / yr
Posted Oct 2, 2026
Sr. Security Engineer
FastSpringRemote (US) +1
$155K–$187K / yr
Posted Aug 19, 2026
Listed on Encora's Greenhouse job board; checked 6 h ago. First seen by us 31 h ago. Being listed doesn't mean the team is actively interviewing. We found this board in a public directory and haven't yet confirmed it against the company's own careers page.