Senior API Security Engineer

encora10· Malaysia Team
Apply Now ↗
📍 Kuala Lumpur

About this role

Key Responsibilities: 
● API Logic Security: Hunt for Business Logic vulnerabilities (BOLA/IDOR, Mass 
Assignment) that traditional firewalls miss. 
● Authentication & Authorization: Design and validate OAuth2, OIDC, and JWT 
implementations to ensure users can only access their own data. 
● Attack Simulation: Script automated attacks against the API Gateway to test rate limiting 
and fraud detection rules. 
● Gateway Hardening: Work with the Platform team to configure the API Gateway (Kong, 
or Azure API Gateway) for maximum security. 
● Auth & Partner Integration: Deliver new security design patterns and components for 
authentication, authorization, SSO, MFA, and Partner security. Standardize how we 
consume external APIs (Open Banking) and how we secure our own exposed endpoints. 

Technical Requirements: 
● Strong scripting skills (Python) to automate API attacks. 
● Expertise in REST and GraphQL security. 
● Deep knowledge of OAuth 2.0 and OpenID Connect (OIDC) flows. 
● Experience with API Security tools (Postman, Burp Suite, 42Crunch).

Frequently Asked Questions

Is the salary disclosed for the Senior API Security Engineer position at encora10?
The salary for this Senior API Security Engineer role at encora10 is not publicly listed. Click "Apply Now" to learn more about the compensation package on their official careers page.
Where is the Senior API Security Engineer position at encora10 located?
This Senior API Security Engineer role at encora10 is based in Kuala Lumpur. The position is listed as on-site or hybrid. Check the full job description or apply directly to confirm the work arrangement.
Which team or department does the Senior API Security Engineer at encora10 belong to?
This Senior API Security Engineer position is part of the Malaysia Team department at encora10. See the full job description for more information about the team structure and responsibilities.
How do I apply for the Senior API Security Engineer position at encora10?
Click the "Apply Now" button on this page. You will be redirected to encora10's official application portal hosted on greenhouse where you can submit your application directly.
When was the Senior API Security Engineer job at encora10 posted?
This Senior API Security Engineer position at encora10 was posted on Jun 22, 2026. Apply as soon as possible — early applications are often reviewed first.
Senior API Security Engineer
encora10
Apply for this role ↗

You'll be redirected to encora10's official application page on Greenhouse.