hirly
Sign inGet started free

Encora10

Senior API Security Engineer

Kuala Lumpur

See how you match this job — and similar ones. Free.

Upload your resume and hirly scores it against this role at Encora10 first, then against similar open jobs, and shows where you fit and why.

PDF or DOCX, up to 12MB. No sign-up to see your matches.

Get past the screening software and onto a recruiter's desk

hirly rewrites your resume for this job — matching the keywords and skills in the posting, moving your most relevant experience to the top, and writing a cover letter to fit. About 30 seconds.

  • Keywords matched to this posting
  • Fit score before you apply
  • Cover letter included

Matched against 2.6M live jobs from 210,000+ employers in 200+ countries.

Tailor my resume for this job →

Apply from your AI assistant

Connect hirly to Claude or ChatGPT and ask it to apply to this job. hirly tailors your resume, fills the employer’s form and asks before sending.

See how it works

Some employer sites stop an application at a CAPTCHA or sign-in and hand it back with a link. Applying needs a paid plan. Works with any assistant that supports MCP.

hirly's read of this role

Role family
Engineering
Seniority
Senior
Country
MY
Work mode
On-site / unstated
First seen by hirly
4 Sept 2026

Derived automatically from the posting. Upload your resume above to see how the role scores against it.

the posting

  • Key Responsibilities:
  • ● API Logic Security: Hunt for Business Logic vulnerabilities (BOLA/IDOR, Mass
  • Assignment) that traditional firewalls miss.
  • ● Authentication & Authorization: Design and validate OAuth2, OIDC, and JWT
  • implementations to ensure users can only access their own data.
  • ● Attack Simulation: Script automated attacks against the API Gateway to test rate limiting
  • and fraud detection rules.
  • ● Gateway Hardening: Work with the Platform team to configure the API Gateway (Kong,
  • or Azure API Gateway) for maximum security.
  • ● Auth & Partner Integration: Deliver new security design patterns and components for
  • authentication, authorization, SSO, MFA, and Partner security. Standardize how we
  • consume external APIs (Open Banking) and how we secure our own exposed endpoints.
  • Technical Requirements:
  • ● Strong scripting skills (Python) to automate API attacks.
  • ● Expertise in REST and GraphQL security.
  • ● Deep knowledge of OAuth 2.0 and OpenID Connect (OIDC) flows.
  • ● Experience with API Security tools (Postman, Burp Suite, 42Crunch).
Original posting on Encora10's site ↗

Listed on hirly, a job board. hirly is not the employer: Encora10 is hiring for this role.

Similar jobs

Browse similar roles

Want this one?

Upload your resume and hirly rewrites it for this job and writes the cover letter — in about thirty seconds, before you sign up.

Tailor my resume for this job