Senior Specialist, Security Verification & Testing

GX Bank Berhad - the Grab-led Digital Bank - is the FIRST digital bank in Malaysia, approved by BNM to commence operations. We aim to leverage technology and innovation to serve the financial needs of the unserved and underserved individuals, and micro and small medium enterprises.

We are driven by our shared purpose and passion to bring positive transformation to the banking industry, starting with solutions that address the financial struggles of Malaysians and businesses.

Get To Know The Role

• Perform secure design review, threat modelling, secure code review, penetration testing and assist developers in triaging scan results.
• Develop comprehensive and accurate reports and presentations for both technical and executive audiences and make recommendations for security improvements.
• Effectively communicate findings and strategy to stakeholders including technical staff and executive leadership.
• Develop and socialise security standards, training courses on secure design best practices, related to cryptography, authentication, access control, etc.
• Lead engagements with Engineering teams from scoping through remediation, and mentoring less experienced staff.

• Background in coding, fluent in several modern programming languages.
• Excellent understanding of secure design and coding best practices.
• Experience using scanning tools for mobile, API and web application security testing.
• At least 6 years experience with a minimum of 3 of the following:
• Strong experience with AWS, Azure or GCP.
• Design of highly-available and highly-secure solutions in the financial sector.
• Design of container-based infrastructures in the cloud.
• Development of mobile applications, RESTful APIs, web applications.
• Secure code review of mobile applications, RESTful APIs, web applications.
• Penetration testing of mobile applications, RESTful APIs, web applications.