Senior Associate IT Security Kuala Lumpur, Malaysia

Overview

Appnovation is a global, full-service digital partner that combines Strategy, Experience & Design, Engineering and Managed Services. We build digital solutions that deliver real impact today and serve as foundations for future growth. Bold ambition. Practical action. Endless possibilities. As a member of the IT team, the Sr. Associate, IT (Security) will be responsible for strengthening Appnovation's security posture while providing security expertise for both internal operations and client projects. This hybrid role combines strategic security planning with hands-on implementation across IT infrastructure and development projects, serving as a security champion and consultant to our engineering teams working on mobile applications, websites, cloud infrastructure, and data processing pipelines. The IT team at Appnovation provides critical infrastructure and security services to teams around the world. About the Role

As a senior member of this team, you will have the opportunity to shape security practices, respond to emerging threats, and guide security initiatives across the organization while actively participating in development projects to ensure secure coding practices and conduct security assessments of applications and systems before deployment. Appnovation prides itself on having an open environment focused on teamwork and growth, giving you the opportunity to guide your workload and grow your career. What we are looking for

Lead the implementation and maintenance of information security controls across all company systems and infrastructure Conduct regular security assessments, vulnerability scanning, and penetration testing to identify and mitigate potential weaknesses Manage and respond to security incidents, coordinating investigation and remediation efforts in accordance with incident response procedures Develop and maintain security policies, procedures, and documentation, ensuring alignment with business requirements and regulatory compliance Configure and manage security tools including anti-malware software, firewalls, intrusion detection / prevention systems, and SIEM platforms Oversee identity and access management (IAM) implementation, including multi-factor authentication and privileged access management Provide security expertise for client projects, conducting security assessments and recommending appropriate controls; collaborate with IT team members to resolve security-related tickets and support requests Integrate static application security testing (SAST) tools into development pipelines and conduct regular code security analysis Deploy and manage AI-powered code analysis tools to identify security vulnerabilities in mobile applications, web applications, and cloud infrastructure code Partner with tech leads and engineering teams to review security findings, prioritize remediation efforts, and implement secure coding practices Conduct security assessments of mobile applications across iOS and Android platforms, including API security and data protection Assess security of cloud infrastructure deployments, data pipelines, and serverless architectures across AWS and GCP Generate comprehensive security reports for development projects and communicate critical findings to senior engineering leadership Provide security consultation during architecture and design phases of development projects Monitor threat intelligence sources and security advisories to proactively address emerging vulnerabilities Manage relationships with security vendors and evaluate new security technologies Ensure compliance with data protection regulations (GDPR, CCPA, HIPAA) and maintain privacy controls for personally identifiable information Lead technical vulnerability management efforts, coordinating patch deployment and risk mitigation strategies Support business continuity planning through backup verification and disaster recovery testing Who you are

Proactive security professional with strong analytical and problem-solving skills Experienced in implementing and managing enterprise security controls and frameworks Demonstrated experience with application security testing tools and secure software development lifecycle (SSDLC) Comfortable communicating complex security concepts to all organizational levels (from technical teams to executives) and strong collaborative and communication skills Able to balance strategic security initiatives with day-to-day operational support Detail-oriented with the ability to manage multiple security projects simultaneously Experience working embedded with development teams or in DevSecOps roles preferred 8+ years of experience in information security roles, with demonstrated expertise in : Network security technologies (firewalls, IDS / IPS, VPN) Identity and access management (IAM) solutions Vulnerability assessment and penetration testing tools, SIEM and security monitoring platforms Cloud security (SaaS application security, cloud infrastructure protection) Web application security assessment and secure coding practices, API security testing and OAuth / JWT implementation security Container and serverless security in cloud environments Integration of security tools into CI / CD pipelines and DevSecOps practices What Appnovation Offers

Challenging and rewarding work with real impact Direct Access to Cutting-Edge AI Platforms Diverse and Inclusive Culture Growth opportunities for personal and professional development A collaborative and innovative work environment where your ideas are valued Exposure to exciting projects and high-profile clients Supportive work environment with access to company leaders What Benefits Appnovation Has to offer

Private Medical Plan EPF ME Days Employee Assistance Programme Fertility and Menopause Leave Diversity, Equity & Inclusion is a core value of Appnovation. We are an Equal Opportunity Employer and welcome applicants from all backgrounds and experiences. Accommodations are available upon request during the recruitment process.

#J-18808-Ljbffr