Key Responsibilities: ● API Logic Security: Hunt for Business Logic vulnerabilities (BOLA/IDOR, Mass Assignment) that traditional firewalls miss. ● Authentication & Authorization: Design and validate OAuth2, OIDC, and JW…
Skills: API Security, Python, REST, GraphQL, OAuth 2.0
Key Responsibilities: ● Threat Modeling: Lead design reviews for new banking features (Payments, Transfers, KYC). Identify logic flaws before code is written. ● Pipeline Automation: Architect and maintain the SAST/DAST/S…
Company Description Meet Unit4. With over 40 years of heritage, we’re an agile, fast growing, Cloud company that is on a mission to redefine Enterprise Resource Planning (ERP) for mid-market people-centric organisations.…
Skills: Security Monitoring, Incident Response, Threat Analysis, OS Hardening, SIEM
Cloud Network Engineer & Cloud Infrastructure Engineer We are seeking talented individuals to join our Cloud Engineering team in the following roles: - Cloud Network Engineer - Cloud Infrastructure Engineer As the Global…
Skills: AWS, Azure, Cloud Networking, Infrastructure as Code, Terraform
Company: 2201 United Overseas Bank (Malaysia) Bhd About UOB United Overseas Bank Limited (UOB) is a leading bank in Asia with a global network of more than 500 branches and offices in 19 countries and territories in Asia…
Internship for Cyber Design, Validation & Assurance, Cyber Security, PETRONAS Digital Sdn. Bhd., Menara Berkembar PETRONAS KL
Kuala Lumpur, Kuala Lumpur, Malaysia · On-site
Entry level$350M raised
1. To conduct Cyber Security Risk Assessments and Cyber Security Business Impact Assessments. 2. To assist on user attestation review exercise for Severe applications.
Skills: Cyber Security Risk Assessment, Business Impact Assessment, User Attestation Review, Research, Data Capture
Internship for Cyber Design, Validation & Assurance, Cyber Security, PETRONAS Digital Sdn. Bhd., Menara Berkembar PETRONAS KL
Kuala Lumpur, Kuala Lumpur, Malaysia · On-site
Entry level$350M raised
Job Description: 1. Plan and execute the establishment, documentation, and communication of Cyber Security Findings Management processes to support effective risk governance. 2. Plan and execute monitoring and reporting …
Internship for Cyber Design, Validation & Assurance, Cyber Security, PETRONAS Digital Sdn. Bhd., Menara Berkembar PETRONAS KL
Kuala Lumpur, Kuala Lumpur, Malaysia · On-site
Entry level$350M raised
1. To conduct Cyber Security Risk Assessments and Cyber Security Business Impact Assessments. 2. To assist on user attestation review exercise for Severe applications.
Skills: Cyber Security Risk Assessment, Business Impact Assessment, User Attestation Review, Data Capture, Research
Internship for PET Dep Health, Safety, Environment & Quality - PE&T, Petroliam Nasional Berhad (PETRONAS) at Bangi, Selangor
Kuala Lumpur, Kuala Lumpur, Malaysia · On-site
Entry level$350M raised
We are looking for a dynamic, energetic intern who is eager to learn about our company by assisting various departments. You will be working closely with our team to conduct research, capture data and attend meetings whe…
Skills: Research, Data Capture, Minute Taking, Project Assistance
Senior Associate, Global AML Team (Shift: 1PM-10PM)
Kuala Lumpur, Kuala Lumpur, Malaysia · Hybrid
Mid level
Company Description About MUFG Investor Services: MUFG Investor Services provides asset servicing solutions to the global investment management industry. Leveraging the financial and intellectual capital of MUFG – one of…
Skills: AML Documentation, Compliance, Sanctions Screening, KYC, Investor Relations
Marriott International Hotels, Inc.
Loss Prevention Supervisor
Kuala Lumpur, Kuala Lumpur, Malaysia · On-site
Mid level
POSITION SUMMARY Patrol all areas of the property; secure rooms; assist guests with room access. Conduct emergency response drills, daily physical hazard/safety inspections, investigations, interviews, and key control au…
Skills: Loss Prevention, Emergency Response, Security Monitoring, Investigation, First Aid/CPR
Marriott International Hotels, Inc.
Maintenance Supervisor
Kuala Lumpur, Kuala Lumpur, Malaysia · On-site
Mid level
POSITION SUMMARY Install, maintain, perform preventative maintenance on, and recommend replacement of tools, appliances, and equipment. Calibrate all controls, gauges, meters, etc. Identify, locate, and operate all shut-…
Key Responsibilities - Provide overall technical direction for cybersecurity strategy and architecture across a hybrid on-premise and cloud landscape. - Design and maintain the Group’s cloud security reference architectu…
Skills: Cloud Security Architecture, AWS Security, Zero Trust Architecture, Identity and Access Management, CSPM
Front Desk & Administrative Officer (1-Year Contract)
Kuala Lumpur, Kuala Lumpur, Malaysia · On-site
Entry level$1.9B raised
We are Reckitt Home to the world's best loved and trusted hygiene, health, and nutrition brands. Our purpose defines why we exist: to protect, heal and nurture in the relentless pursuit of a cleaner, healthier world. We …
As a Consultant – Cybersecurity Integration, you will support the cybersecurity workstream of large-scale integration programmes (e.g., acquisitions, divestments, and transformations). You will work closely with cross-fu…
Skills: Cybersecurity, Asset Assessment, Control Assessment, Remediation Tracking, Day 1 Readiness
As a Manager – Cybersecurity Integration, you will lead key streams within large-scale cybersecurity integration programmes (e.g., acquisitions, divestments, and transformations). You will be responsible for managing sec…
JLL empowers you to shape a brighter way. Our people at JLL are shaping the future of real estate for a better world by combining world class services, advisory and technology for our clients. We are committed to hiring …
Skills: Facility Operations, Vendor Management, Health and Safety Compliance, Asset Management, Financial Procurement
Line of Service Assurance Industry/Sector Not Applicable Specialism Risk Architecture Management Level Associate Job Description & Summary A career in our Assurance Risk Management practice, within Assurance Support serv…
Skills: Networking Concepts, TCP/IP, DNS, HTTP, Windows Security
Company: 2201 United Overseas Bank (Malaysia) Bhd About UOB United Overseas Bank Limited (UOB) is a leading bank in Asia with a global network of more than 500 branches and offices in 19 countries and territories in Asia…
Skills: Risk Assessment, AML Controls, Source of Wealth Analysis, Client Due Diligence, Risk Rating Review
At Johnson Matthey, your work will matter. As a Security Engineer, you’ll join a world leader in platinum group metals with over 200 years of history. Using advanced metals chemistry, you’ll help tackle the world’s bigge…
Sign up with Clera and we'll reach out the moment a role actually fits you — no more spraying applications into the void.
Full-time
Posted 51d ago
~40 hrs/week
Responsibilities
The role focuses on hunting for business logic vulnerabilities and designing secure authentication and authorization frameworks. It also involves hardening API Gateways and standardizing security patterns for external and internal endpoints.
Requirements
Candidates must have strong Python scripting skills and expertise in REST and GraphQL security. Deep knowledge of OAuth 2.0, OIDC, and experience with tools like Burp Suite and 42Crunch are required.
Full job description
Key Responsibilities: ● API Logic Security: Hunt for Business Logic vulnerabilities (BOLA/IDOR, Mass Assignment) that traditional firewalls miss. ● Authentication & Authorization: Design and validate OAuth2, OIDC, and JWT implementations to ensure users can only access their own data. ● Attack Simulation: Script automated attacks against the API Gateway to test rate limiting and fraud detection rules. ● Gateway Hardening: Work with the Platform team to configure the API Gateway (Kong, or Azure API Gateway) for maximum security. ● Auth & Partner Integration: Deliver new security design patterns and components for authentication, authorization, SSO, MFA, and Partner security. Standardize how we consume external APIs (Open Banking) and how we secure our own exposed endpoints.
Technical Requirements: ● Strong scripting skills (Python) to automate API attacks. ● Expertise in REST and GraphQL security. ● Deep knowledge of OAuth 2.0 and OpenID Connect (OIDC) flows. ● Experience with API Security tools (Postman, Burp Suite, 42Crunch).
Related keywords
API SecurityBOLAIDORMass AssignmentOAuth2OIDCJWTAPI GatewayKongAzure API GatewaySSOMFAOpen BankingPythonRESTGraphQL
Coforge announces the successful closure of the Encora acquisition.
Coforge is an AI-native engineering services leader, where AI is the very foundation of how we design, build, and deliver intelligent solutions for our clients. We use AI and hyperspecialized industry expertise to engineer autonomous enterprises.
We combine AI agents with our AI-enabled workforce, including specialized FDEs in hybrid pod-based delivery units. With a deep focus on trusted AI, our solutions are secure, governed, and enterprise-grade.
We are outcome-led by design. Moving beyond AI experimentation, we deliver measurable business outcomes – lower operating costs, faster cycle times, higher conversion rates, and sustained margin growth.
Offices: 4988 Great America Pkwy, Santa Clara, California 95054, US
Software and Digital Product Engineering ServicesSoftwareCloud ComputingBig Data
How many Security & Safety jobs are open in Kuala Lumpur, Malaysia right now?
There are currently 369 open security & safety positions in Kuala Lumpur, Malaysia listed on Clera. New openings are added daily as companies post roles.
Which companies are hiring for Security & Safety roles in Kuala Lumpur, Malaysia?
Companies currently hiring include PETRONAS, Marriott International Hotels, Inc., Monitor Deloitte, Bybit, Bureau Veritas do Brasil, among others. Browse the listings above to see every active employer.
Are there remote or hybrid Security & Safety jobs in Kuala Lumpur, Malaysia?
Yes — 69 of the 369 open security & safety positions offer remote or hybrid work (13 remote, 56 hybrid).
How do I apply for Security & Safety jobs in Kuala Lumpur, Malaysia?
Each listing links directly to the employer's application page. Apply early — fresh listings get the most recruiter attention in the first two weeks.