Application Security Engineer

About the role

Sopra Steria, a European technology group with its Asia Pacific headquarters in Singapore, is forming a team of six people (including one team lead) to support a large government project covering security risk assessment, security policies review, security design, application security, vulnerability assessment, system acceptance testing and cloud security. The Application Security Engineer provides expert advice, runs security assessments and helps government teams embed security throughout the software development lifecycle.

Key responsibilities

• Assess risks in development environments, DevOps workflows and CI/CD processes
• Run security assessments, threat modelling and code reviews to find application vulnerabilities
• Review identity and access management, network security, secure SDLC, source code management, cryptographic key handling and data protection, and recommend improvements
• Guide teams in adopting secure development practices and integrating SAST, DAST and VAPT tools
• Review CI/CD pipelines from a security perspective and align them with DevSecOps principles
• Mentor teams on secure coding across JavaScript, Node.js, Java, C# and Python, and develop secure coding guidelines
• Help teams remediate security issues

Required profile

• At least 3 years of experience in application security or software development with a security focus
• Strong DevSecOps experience and a solid foundation in cybersecurity and risk assessment
• Hands-on knowledge of SSDLC principles and tools
• Ability to work with and guide development teams without taking part in implementation
• Excellent communication skills and the ability to turn complex security requirements into practical advice

Required skills

• DevSecOps and secure software development lifecycle
• Familiarity with security testing tools in CI/CD environments
• Secure coding and vulnerability assessments across web and mobile technologies

What we offer

• Hybrid working mode and 18 days of annual leave
• Comprehensive health and insurance coverage (GP, hospitalization, dental, optical)
• Annual performance-based bonus
• Training programs, certification opportunities and learning incentives
• Regular team-building activities and social events