Application Security Engineer AppSec
Bjak · Remote · Global ·
COMPENSATION
€•• – ••k
Listed on the employer's job board (Ashby)
- Fully remote (Global)
- AppSec + Pen Testing
- OWASP Top 10 Expertise
- 3+ Years Experience
- English Required
Join BJAK, the leading mobile-first insurance platform in Southeast Asia, as an Application Security Engineer. You will secure web applications, APIs, and backend services while coordinating with mobile stakeholders to manage cross-platform risks.
Your work will focus on integrating security into design, development, and release workflows. You will help redefine how people in the region plan, save, and grow their money by ensuring robust protection for financial applications.
What you'll do
- Perform security reviews, code audits, and testing for web apps and APIs
- Identify and remediate vulnerabilities like injection and broken access control
- Integrate SAST, DAST, and secrets scanning into CI/CD pipelines
- Conduct threat modeling for features, APIs, and third-party integrations
- Coordinate with mobile engineers on iOS and Android security controls
- Own AppSec implementation for SC TRM and BNM RMiT compliance
- Provide secure coding guidance and improve developer security awareness
What you'll need
- Degree in Computer Science, Cybersecurity, or equivalent experience
- 3+ years in application security, pen testing, or secure development
- Experience with SC TRM and BNM RMiT secure SDLC requirements
- Strong knowledge of OWASP Top 10 and API Security Top 10
- Hands-on experience with Burp Suite, OWASP ZAP, and scanning tools
- Ability to review TypeScript/Node.js and Python services
- Strong English communication skills for global team collaboration
Nice to have
- Familiarity with Swift and Kotlin for mobile security
- Experience with AWS and GCP cloud environments
Stack
- TypeScript
- Node.js
- Python
- Swift
- Kotlin
- AWS
- GCP
- Burp Suite
- OWASP ZAP
How you'll work
- Fully remote position with global team
- English is the main working language