Lead Application Security Engineer

encora10· Malaysia Team
Apply Now ↗
📍 Kuala Lumpur

About this role

Key Responsibilities: 
● Threat Modeling: Lead design reviews for new banking features (Payments, Transfers, 
KYC). Identify logic flaws before code is written. 
● Pipeline Automation: Architect and maintain the SAST/DAST/SCA tooling in the CI/CD 
pipeline (e.g., SonarQube, Snyk, GitLab CI) to block vulnerabilities automatically. 
● Code Review: Perform manual code audits on high-risk components (Authentication, 
Ledger logic) in Java, Kotlin, or Swift. 
● Cloud & AI Patterns: Deliver API, container, cloud, and AI security design patterns. 
Ensure that developers have "paved roads" (secure templates) for deploying 
microservices and AI models. 
● Culture: Act as a mentor to the development team, running secure coding workshops and 
championing a "Security Champion" program. 

Technical Requirements: 
● 5+ years in Application Security with a background in Software Development. 
● Proficiency in at least one core language: Java (Spring Boot), Node.js, or Go. 
● Deep understanding of OWASP Top 10 and SANS Top 25. 
● Experience with CI/CD integration (Jenkins, GitHub Actions). 
● Bonus: Experience in Fintech or Banking.

Frequently Asked Questions

Is the salary disclosed for the Lead Application Security Engineer position at encora10?
The salary for this Lead Application Security Engineer role at encora10 is not publicly listed. Click "Apply Now" to learn more about the compensation package on their official careers page.
Where is the Lead Application Security Engineer position at encora10 located?
This Lead Application Security Engineer role at encora10 is based in Kuala Lumpur. The position is listed as on-site or hybrid. Check the full job description or apply directly to confirm the work arrangement.
Which team or department does the Lead Application Security Engineer at encora10 belong to?
This Lead Application Security Engineer position is part of the Malaysia Team department at encora10. See the full job description for more information about the team structure and responsibilities.
How do I apply for the Lead Application Security Engineer position at encora10?
Click the "Apply Now" button on this page. You will be redirected to encora10's official application portal hosted on greenhouse where you can submit your application directly.
When was the Lead Application Security Engineer job at encora10 posted?
This Lead Application Security Engineer position at encora10 was posted on Jun 22, 2026. Apply as soon as possible — early applications are often reviewed first.
Lead Application Security Engineer
encora10
Apply for this role ↗

You'll be redirected to encora10's official application page on Greenhouse.