Senior API Security Engineer
Encora · Kuala Lumpur
Job description
About the role
Encora is hiring a Senior API Security Engineer in Kuala Lumpur. The role focuses on securing APIs through logic vulnerability hunting, authentication and authorization design, attack simulation and gateway hardening.
Key responsibilities
- Hunt for business logic vulnerabilities (BOLA/IDOR, mass assignment) that traditional firewalls miss.
- Design and validate OAuth2, OIDC and JWT implementations so users can only access their own data.
- Script automated attacks against the API Gateway to test rate limiting and fraud detection rules.
- Work with the Platform team to configure the API Gateway (Kong or Azure API Gateway) for maximum security.
- Deliver security design patterns and components for authentication, authorization, SSO, MFA and partner security, and standardize how external APIs (Open Banking) and exposed endpoints are secured.
Required profile
- Strong Python scripting skills to automate API attacks.
- Expertise in REST and GraphQL security.
- Experience with API security tools such as Postman, Burp Suite and 42Crunch.
Questions fréquentes
Why are you reporting this job?
Explore further
Salaries, guides and searches in Malaysia.
Salaries by job title
Apply in 30 seconds
Enter your email to apply. An account will be created automatically.
By continuing, you accept our terms of use.
Already have an account? Login
A question about this job?
Ask it here: you will get the full job summary by e-mail, right away.
Published 1 day ago
Expires 1 month from now
4 views · 0 interested
Boost your chances
Upload your CV — we will match you with relevant openings.
Analyzing your CV...
Encora
Kuala Lumpur
Related job offers
-
Senior Business Data Analyst
Timeo-Performance Kuala Lumpur -
VMware Cloud Foundation (VCF) Engineer
Encora Kuala Lumpur -
Tanzu Engineer
Encora Kuala Lumpur -
Architecte Solutions – Infrastructure Broadcast & Media (H/F/D)
Riedel Communications GmbH Casablanca -
Game Site Reliability Engineer Intern (Malaysia)
tencent