Encora logo

Lead Application Security Engineer

Posted about 4 hours ago

OfficeKuala LumpurSE

Key Responsibilities:
● Threat Modeling: Lead design reviews for new banking features (Payments, Transfers,
KYC). Identify logic flaws before code is written.
● Pipeline Automation: Architect and maintain the SAST/DAST/SCA tooling in the CI/CD
pipeline (e.g., SonarQube, Snyk, GitLab CI) to block vulnerabilities automatically.
● Code Review: Perform manual code audits on high-risk components (Authentication,
Ledger logic) in Java, Kotlin, or Swift.
● Cloud & AI Patterns: Deliver API, container, cloud, and AI security design patterns.
Ensure that developers have "paved roads" (secure templates) for deploying
microservices and AI models.
● Culture: Act as a mentor to the development team, running secure coding workshops and
championing a "Security Champion" program.

Technical Requirements:
● 5+ years in Application Security with a background in Software Development.
● Proficiency in at least one core language: Java (Spring Boot), Node.js, or Go.
● Deep understanding of OWASP Top 10 and SANS Top 25.
● Experience with CI/CD integration (Jenkins, GitHub Actions).
● Bonus: Experience in Fintech or Banking.

Job details
Workplace
Office
Location
Kuala Lumpur
Experience
SE

Coforge Limited is a global AI-native engineering and digital services leader, where artificial intelligence is core to how we design, build, and deliver intelligent, scalable solutions for enterprises across BFSI, travel, transportation, healthcare, and insurance.

Key team members

Partha Anbil

Partha Anbil

Brian Glidden

Brian Glidden

Mike Himley

Mike Himley

Rajeev Pandey

Rajeev Pandey

Apply smarter with Jobr

Jobr aggregates jobs directly from company career portals — no middlemen. Our team applies on your behalf with AI-tailored resumes, reviewed by a human before submission.

Direct from company career pages
AI-personalised cover letters
Human review before every submit
Application tracking & follow-ups