Application Security Engineer AppSec
Bjak · Remote · China ·
COMPENSATION
€•• – ••k
Listed on the employer's job board (Ashby)
- Fully remote
- AppSec Engineer
- 3+ years experience
- English required
- Global team
Join BJAK, the leading insurance platform in Southeast Asia, as an Application Security Engineer. You will secure web applications, APIs, and backend services while coordinating with mobile stakeholders on cross-platform risks. Your work ensures security is embedded into design, development, testing, and release workflows.
What you'll do
- Perform security reviews, code reviews, and testing for web apps and APIs
- Identify and help remediate injection and access control vulnerabilities
- Integrate SAST, DAST, and secrets scanning into CI/CD pipelines
- Conduct threat modeling for features and third-party integrations
- Coordinate with mobile engineers on cross-platform security findings
- Own application security implementation for SC TRM and BNM RMiT
- Provide secure coding guidance and improve developer awareness
What you'll need
- Degree in Computer Science, Cybersecurity, or equivalent experience
- 3+ years in application security or secure software development
- Experience with SC TRM and BNM RMiT security requirements
- Strong understanding of OWASP Top 10 and API Security Top 10
- Hands-on experience with Burp Suite, OWASP ZAP, and SAST/DAST tools
- Experience reviewing TypeScript/Node.js and Python services
- Familiarity with Swift, Kotlin, AWS, and GCP
- Strong English communication skills
Stack
- TypeScript
- Node.js
- Python
- Swift
- Kotlin
- AWS
- GCP
- Burp Suite
- OWASP ZAP
How you'll work
- Remote work available
- Global team collaboration
- English is the main working language