Senior Engineer - Application Security
Company: Axonect
Role summary
Senior Engineer - Application Security is a contract role at Axonect in Kuala Lumpur, Kuala Lumpur, Malaysia (on-site). Posted 2026-10-13. Experience level: 2-5.
- Job title
- Senior Engineer - Application Security
- Company
- Axonect
- Location
- Kuala Lumpur, Kuala Lumpur, Malaysia
- Work arrangement
- on-site
- Employment type
- contract
- Category
- Software Engineering
- Experience level
- 2-5
- Date posted
- 2026-10-13
Here's a fantastic contract opportunity for a Senior Application Security Engineer where you'll play a crucial role in embedding security throughout the entire development process. You'll get to work with cutting-edge tools and help shape secure coding practices.
Job description
Key Responsibilities
Integrate security requirements, controls, and testing into the Software Development Life Cycle (SDLC) and DevSecOps pipelines
Manage and support application security tools, including SAST, DAST, SCA, secret scanning, and container security scanning solutions
Conduct web application and API security assessments to identify vulnerabilities and potential risks
Review application architectures and designs, recommending secure design practices and improvements
Establish secure coding standards, guidelines, and developer security awareness initiatives
Validate security controls before production releases and support secure application deployments
Perform vulnerability triage, validate false positives, and track remediation activities
Monitor emerging application security threats and recommend improvements to security practices
Collaborate with developers, DevOps engineers, cloud teams, and project stakeholders throughout the SDLC
Person Specifications
4+ years of relevant experience in application security, DevSecOps, or software security engineering
Strong understanding of OWASP standards, secure coding practices, and common application vulnerabilities
Hands-on experience with SAST, DAST, SCA, secret scanning, and container security tools
Familiarity with application and API security testing tools such as Burp Suite
Understanding of CI/CD pipelines, software development processes, and security integration throughout the SDLC
Ability to assess security risks, analyze vulnerabilities, and provide practical remediation recommendations
Strong analytical, problem-solving, communication, and collaboration skills
Relevant application security or cybersecurity certifications are advantageous
Vendor submissions - 12 months