5 days ago
Kuala Lumpur, MalaysiaSenior
Responsibilities
- Conduct manual code security audits of business applications written in Java, Go, JavaScript, C++, and other languages.
- Write security audit reports and identify vulnerabilities in code, architecture, business processes, and business logic.
- Track, analyze, and reproduce emerging domestic and international security vulnerabilities.
- Assess security risks in business requirements and technical implementation plans and provide remediation solutions.
- Drive security solution implementation, SDL activities, and broader security risk governance.
- Apply penetration-testing methods and vulnerability exploitation techniques to support security assessments.
Requirements
- Associate degree or higher, with education requirements potentially relaxed for candidates with strong capabilities.
- At least 3 years of Java- or Go-based business development or security audit experience, including leading or participating in SDL implementation.
- Expert-level proficiency in Java and/or Go, including language characteristics, mainstream frameworks, and relevant code-audit experience.
- Strong knowledge of common security vulnerabilities, including OWASP Top 10, their discovery methods, vulnerable code patterns, and exploitation techniques.
- Familiarity with white-box security-audit methodologies and the ability to track and reproduce emerging vulnerabilities.
- Solid penetration-testing knowledge and proficiency with common testing methods and vulnerability exploitation techniques.
- Ability to use AI tools to improve security-work efficiency, along with strong analytical, communication, coordination, organization, and documentation skills.
- Preferred qualifications include TEE and data-protection architecture experience, security solution implementation, high-quality bug-bounty or SRC submissions, CVE or CNVD discoveries, and demonstrated Java or Go code-audit results.
Benefits
- Study Growth Fund supporting professional development and continuous learning.
- Internal team-building activities, workshops, and collaboration events.
- Global collaboration with colleagues across an international organization.
- Career advancement opportunities within a rapidly expanding global company.
- Internal mobility opportunities to support long-term career development.
Tech Stack
Categories
