Application Security Engineer AppSec

Responsibilities

• Perform security reviews, code reviews, and testing for web applications, APIs, and backend services
• Identify, prioritize, and help remediate injection, broken access control, authentication, and configuration vulnerabilities
• Integrate SAST, DAST, software composition analysis, and secrets scanning into CI/CD pipelines
• Conduct threat modeling and design reviews for features, APIs, third-party integrations, and major changes
• Coordinate with mobile engineers on cross-platform findings and backend controls protecting native iOS and Android clients
• Own application security implementation for SC TRM and BNM RMiT, including secure SDLC evidence, vulnerability management, testing, and audit remediation
• Provide secure coding guidance, track remediation, retest fixes, and improve developer security awareness

Requirements

• Degree in Computer Science, Cybersecurity, or related discipline, or equivalent experience
• 3+ years in application security, penetration testing, or secure software development
• Experience implementing and owning SC TRM and BNM RMiT application security and secure SDLC requirements
• Strong understanding of OWASP Top 10, OWASP API Security Top 10, web vulnerabilities, API security, and secure design
• Hands-on experience with Burp Suite, OWASP ZAP, SAST, DAST, and dependency scanning tools
• Experience reviewing TypeScript/Node.js and Python services; familiarity with Swift, Kotlin, AWS, and GCP
• Strong English communication skills

About the Company

BJAK is a leading insurance platform in Southeast Asia, providing smarter ways to help people plan, save, and grow their money through mobile-first, insurance, and financial services.