APAC AppSec Engineer — Secure DevOps & Compliance

Liberty Specialty Markets; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Liberty Specialty Markets is seeking an Application Security Engineer with a DevSecOps mindset to embed security across the software development lifecycle in our APAC insurance markets. You will automate security controls, perform secure code reviews, and partner with engineering teams to design threat models for new features.

This hands-on role requires writing code, breaking things responsibly, and empowering developers to ship secure software swiftly while meeting regulators' cyber and

Qualifications

• 5+ years in application security or related field.
• Deep knowledge of OWASP Top 10 and CWE/SANS Top 25.
• Experience integrating security tooling into CI/CD pipelines.
• Cloud security experience in AWS/Azure including IAM and network controls.
• Threat modeling experience (STRIDE).
• Familiarity with SBOM, SLSA, sigstore, or supply chain security initiatives.
• Relevant certifications (OSCP, OSWE, AWS Security Specialty).
• Background in regulated environments — insurance, banking, or financial services preferred.

Responsibilities

• Design, implement, and maintain security automation across CI/CD pipelines, including SAST, DAST, and secret detection.
• Conduct secure code reviews for deployments and new designs; provide actionable, context-rich feedback.
• Partner with engineering teams to perform threat modeling, secure code reviews, and architecture risk assessments.
• Triage, prioritize, and remediate vulnerabilities discovered through automated tooling and tests.
• Build and maintain secure-by-default frameworks, libraries, and templates for developers.
• Develop, maintain, and improve SOPs and guidelines for DevSecOps with regulatory alignment.
• Ensure AppSec controls support regulatory obligations in APAC markets.
• Develop and deliver security training and documentation for engineers.
• Respond to security incidents and perform root-cause analysis.
• Contribute to vulnerability management metrics and reporting to leadership and GRC teams.
• Escalate unresolved security issues to the CISO and preserve risks beyond SLAs.
• Champion a healthy security culture through collaboration.

Skills

AppSec

Web API security

CI/CD Security

Cloud Security

Threat Modeling

APAC Reg Awareness

Communication

Bug Bounty

Open Source

SBOM

OWASP Top10

Secure Code Review

Tools

GitHub Actions

CodeQL

Jenkins

Contrast

Rapid7

Job description

Liberty Specialty Markets is seeking an Application Security Engineer with a DevSecOps mindset to embed security across the software development lifecycle in our APAC insurance markets. You will automate security controls, perform secure code reviews, and partner with engineering teams to design threat models for new features.

This hands-on role requires writing code, breaking things responsibly, and empowering developers to ship secure software swiftly while meeting regulators' cyber and