EN
EncoraLead Application Security Engineer
Read straight from Encora's careers page, verified 3d ago.Seekless can tailor your résumé to it.
Seekless can write your résumé for this posting first.
Before you apply
LocationKuala Lumpur
Typefull-time
SeniorityLead
Experience5+ yrs
DepartmentMalaysia Team
Company size10,000+ people
PostedJun 22, 2026 · 4mo ago
Verified live3d ago
At a glanceSummarised by Seekless from the posting.
5+ years in Application Security with a background in Software Development
Proficiency in at least one core language: Java (Spring Boot), Node.js, or Go
Deep understanding of OWASP Top 10 and SANS Top 25
Experience with CI/CD integration (Jenkins, GitHub Actions)
Lead design reviews for new banking features (Payments, Transfers, KYC)
Architect and maintain SAST/DAST/SCA tooling in CI/CD pipeline
Perform manual code audits on high-risk components in Java, Kotlin, or Swift
Deliver API, container, cloud, and AI security design patterns
Act as a mentor to the development team, running secure coding workshops and championing a Security Champion program
Experience in Fintech or Banking
Skills
SonarQube
Snyk
GitLab CI
Java
Kotlin
Swift
Spring Boot
Node.js
Go
Jenkins
GitHub Actions
Key Responsibilities:
● Threat Modeling: Lead design reviews for new banking features (Payments, Transfers,
KYC). Identify logic flaws before code is written.
● Pipeline Automation: Architect and maintain the SAST/DAST/SCA tooling in the CI/CD
pipeline (e.g., SonarQube, Snyk, GitLab CI) to block vulnerabilities automatically.
● Code Review: Perform manual code audits on high-risk components (Authentication,
Ledger logic) in Java, Kotlin, or Swift.
● Cloud & AI Patterns: Deliver API, container, cloud, and AI security design patterns.
Ensure that developers have “paved roads” (secure templates) for deploying
microservices and AI models.
● Culture: Act as a mentor to the development team, running secure coding workshops and
championing a “Security Champion” program.
Technical Requirements:
● 5+ years in Application Security with a background in Software Development.
● Proficiency in at least one core language: Java (Spring Boot), Node.js, or Go.
● Deep understanding of OWASP Top 10 and SANS Top 25.
● Experience with CI/CD integration (Jenkins, GitHub Actions).
● Bonus: Experience in Fintech or Banking.