Skip to main content

Encora

Senior API Security Engineer

Kuala Lumpur, Malaysia

Location
Kuala Lumpur, Malaysia
Work
Not stated
Employment
Not stated
Level
Senior
Function
Security
Pay
Not stated
Posted
4 months ago

About the role

Key Responsibilities:

  • API Logic Security: Hunt for Business Logic vulnerabilities (BOLA/IDOR, Mass

Assignment) that traditional firewalls miss.

  • Authentication & Authorization: Design and validate OAuth2, OIDC, and JWT

implementations to ensure users can only access their own data.

  • Attack Simulation: Script automated attacks against the API Gateway to test rate limiting

and fraud detection rules.

  • Gateway Hardening: Work with the Platform team to configure the API Gateway (Kong,

or Azure API Gateway) for maximum security.

  • Auth & Partner Integration: Deliver new security design patterns and components for

authentication, authorization, SSO, MFA, and Partner security. Standardize how we

consume external APIs (Open Banking) and how we secure our own exposed endpoints.

Technical Requirements:

  • Strong scripting skills (Python) to automate API attacks.
  • Expertise in REST and GraphQL security.
  • Deep knowledge of OAuth 2.0 and OpenID Connect (OIDC) flows.
  • Experience with API Security tools (Postman, Burp Suite, 42Crunch).

Source

Posted by Encora on their own hiring page, job-boards.greenhouse.io. OptiTalent shows it as published, read 07 Nov 2026 02:13 UTC; the original is the reference.

View the original ad ↗

More at Encora

  • Encora · Brazil

    SeniorEngineering

    Independently design, build, and maintain complex modules of our streaming services, applying sound judgment on diverse problems with significant unknowns.; Drive execution of initiatives, ensuring adherence to quality and operational standards while collaborating with key…

  • Encora · Brazil

    Engineering

    Design, develop, and maintain high-performance C++ SDKs that enable applications and services to create, read, and process complex 2D/3D visualization data.; Enhance SDK capabilities to support both legacy and next-generation visualization formats, ensuring backward…

  • Encora · Brazil

    SeniorEngineering

    Independently design, implement, and maintain complex modules of our processing and streaming services; apply algorithms and profiling to optimize performance and memory use.; Own assigned deliverables end to end: clarify requirements, make implementation decisions, and follow…

  • Encora · Brazil

    Engineering

    Make significant contributions to the design, architecture, and implementation of new functionality that relies on high volumes of data and efficient processing algorithms.; Continuously improve existing API functionality, performance, and service quality while maintaining…