AI-Assurance Application Security Engineer

Assurity Trusted Solutions Pte Ltd; Singapore; On-site; SGD 100,000 - 167,000; Full time

Benefits offered by this job

GovTech backing

Learning culture

Contract staff benefits

Job summary

Assurity Trusted Solutions Pte Ltd is seeking an experienced security engineer to lead AI‑assisted workflows for Threat‑Risk Assessments. You will design and implement a solutions stack that generates draft TRA content from product information and threat patterns, with human review at the forefront.

The role focuses on building a secure knowledge base, centralized code‑scanning capabilities, and automated remediation workflows across CI/CD pipelines, collaborating with the Application Security

Qualifications

• Hands-on in application security, security engineering or related security area.

Responsibilities

• Build an AI-assisted workflow generating draft threat scenarios for TRAs.
• Create a security second brain to support TRA work with reliable data and metadata.
• Build centralized code-scanning across repositories and pipelines with static analysis and secrets checks.
• Develop a knowledge base for VDP issues, track recurrence reductions.
• Develop auto-patching workflow for vulnerabilities from PT reports with governed pipeline.
• Collaborate with security leads, testers and engineers to validate findings.
• Define MCP service interfaces for the CISO team with secure authentication and governance.
• Create evaluation methods and test suites for AI-assisted assurance workflows.
• Turn prototypes into maintainable services with version control, tests, deployment and monitoring.
• Document security assumptions, limitations and operating procedures.

Skills

Python programming

Automation

API integration

Large language models

Tools

Semgrep

CodeQL

SonarQube

Snyk

Checkmarx

Docker

AWS

Job description

Assurity Trusted Solutions Pte Ltd is seeking an experienced security engineer to lead AI‑assisted workflows for Threat‑Risk Assessments. You will design and implement a solutions stack that generates draft TRA content from product information and threat patterns, with human review at the forefront.

The role focuses on building a secure knowledge base, centralized code‑scanning capabilities, and automated remediation workflows across CI/CD pipelines, collaborating with the Application Security