Role Overview :

As an Application Security Engineer, you will serve as the primary guardian of our digital ecosystem, ensuring that security is woven into the fabric of our software development lifecycle.

You will work closely with cross-functional engineering teams, product managers, and executive stakeholders to identify vulnerabilities, architect secure solutions, and champion a security-first culture.

By proactively mitigating risks and automating security controls, you will directly protect our global customer base from evolving cyber threats, ensuring that our business outcomes remain resilient and our reputation for trust remains unblemished across our operations in Singapore, Malaysia, the UK, and Dubai.

Key Responsibilities :

- 1. Architect and implement robust security controls within CI/CD pipelines to ensure that code deployments remain secure without compromising development velocity.

- 2. Conduct comprehensive threat modeling and security architecture reviews for new product features to proactively identify and neutralize potential attack vectors before they reach production.

- 3. Lead deep-dive vulnerability assessments and penetration testing on web and mobile applications to safeguard sensitive user data and maintain regulatory compliance.

- 4. Collaborate with software engineering squads to provide actionable remediation guidance, fostering a culture of shared responsibility for security outcomes.

- 5. Develop and maintain automated security testing tools to streamline the detection of common vulnerabilities, thereby reducing the manual burden on the security team.

Required Skillset :

- 1. Demonstrated expertise in securing complex, cloud-native applications and microservices architectures, with a deep understanding of OWASP Top 10 and common exploitation techniques.

- 2. Proven ability to translate technical security findings into clear, business-focused insights for non-technical stakeholders and senior leadership.

- 3. Strong proficiency in at least one major programming language such as Java, Python, or Go, enabling you to perform effective code reviews and security automation.

- 4. Exceptional interpersonal skills to influence engineering teams and drive security initiatives across diverse, multi-regional, and hybrid work environments.

- 5. A Bachelors degree in Computer Science, Cybersecurity, or a related technical field, complemented by a track record of continuous learning in the rapidly shifting threat landscape.

- 6. Ability to thrive in a global, distributed team structure, maintaining high standards of communication and collaboration across different time zones and cultural contexts.