Full Time Lead Security Engineer Jobs, in OneCredit Federal Territory - Maukerja

Company Overview

OneCredit is Malaysia's newest Credit Bureau registered under the Ministry of Finance. We compile and maintain individual and business credit information to generate insights to help businesses and consumers manage risk, make informed decisions, and achieve financial goals. Beyond that, we are an information services and technology company specialising in big data analytics to support decision making in government, business, and finance.

The Role

As Lead Security Engineer, you will provide technical leadership in designing and implementing security solutions across applications, APIs, infrastructure, and system integrations. You will work closely with engineering, product, and business stakeholders to embed security throughout the software development lifecycle while aligning security initiatives with business objectives and risk management priorities.

This role is suited to a security professional who combines strong hands-on technical expertise with architectural thinking, risk management, and the ability to influence engineering practices.

Key Responsibilities

Security Architecture & Engineering

• Lead the design and review of secure, scalable system architectures across frontend, backend, APIs, and infrastructure.
• Embed security-by-design principles throughout the software development lifecycle.
• Define and maintain security standards, secure coding guidelines, and engineering best practices.
• Evaluate and implement security controls to protect applications, infrastructure, data, and system integrations.

Threat Management & Risk Mitigation

• Conduct threat modelling, security assessments, and architecture reviews to identify and address potential vulnerabilities.
• Lead vulnerability management initiatives, prioritising remediation based on risk and business impact.
• Assess the security implications of third-party APIs, tools, platforms, and technology vendors.
• Drive continuous improvements to strengthen the organisation's overall security posture.

Technical Leadership & Collaboration

• Partner with product managers, software engineers, and cross-functional stakeholders to translate business requirements into secure technical solutions.
• Provide technical guidance and mentorship to engineers on secure development practices.
• Lead security investigations, incident response, root cause analysis, and remediation efforts.
• Advise senior leadership on security risks, architecture decisions, emerging threats, and strategic security improvements.

Continuous Improvement

• Stay current with emerging cyber threats, vulnerabilities, security technologies, and industry best practices.
• Identify opportunities to improve security processes, engineering standards, and operational resilience.

What We're Looking For

• A degree in Computer Science, Information Security, Cybersecurity, Software Engineering, or a related discipline, or equivalent practical experience.
• Strong experience in security engineering, application security, security architecture, or a closely related field.
• Solid understanding of secure software development, system architecture, API security, and infrastructure security.
• Practical experience with threat modelling, vulnerability assessment, security reviews, and risk mitigation.
• Familiarity with security principles such as least privilege, defence in depth, identity and access management, and secure system design.
• Experience working closely with software engineering and product teams to implement security controls without compromising delivery and system performance.
• Strong analytical, problem-solving, communication, and stakeholder management skills.
• The ability to provide technical direction, mentor engineers, and influence security practices across teams.

Added advantages:

• Relevant security certifications such as CISSP, CSSLP, OSCP, or equivalent.
• Experience in cloud security, DevSecOps, CI/CD security, container security, or infrastructure-as-code security.
• Experience in financial services, fintech, credit reporting, or other data-sensitive environments.

Why Join OneCredit?

• Play a key role in shaping the security architecture of a growing technology and credit reporting business.
• Influence security engineering practices and technical decisions across the organisation.
• Work on systems involving credit information, data analytics, and business-critical technology.
• Collaborate with cross-functional teams in a growing, technology-driven environment.

Interested?

If you are passionate about building secure systems, solving complex security challenges, and driving security excellence, we would like to hear from you.

Apply through LinkedIn or send your CV to our recruitment team.

Join OneCredit and help us build secure, resilient technology for better decision-making.