APAC DevSecOps Security Engineer

Liberty in Asia Pacific; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Liberty in Asia Pacific is seeking an Application Security Engineer to embed security into the software development lifecycle across APAC markets. You will partner with engineering teams to shift security left, automate controls, and deliver secure software at speed.

Your work will support compliance with cyber risk requirements issued by regulators in APAC and involve threat modeling, secure code reviews, and secure-by-default pipeline design.

Qualifications

• 5+ years of experience in application security or related field.
• Strong knowledge of OWASP Top 10 and web/API security.
• Experience integrating security tooling into CI/CD pipelines.
• Cloud security in AWS/Azure, including IAM and container security.
• Threat modeling using STRIDE.
• Familiarity with APAC regulatory guidance for insurers.
• Certifications such as OSCP/OSWE or AWS Security.

Responsibilities

• Design, implement, and maintain security automation across CI/CD pipelines, including SAST, DAST, and secret detection.
• Conduct secure code reviews for deployments and designs, providing actionable feedback.
• Partner with engineering for threat modeling and architecture risk assessments.
• Triage, prioritize, and remediate vulnerabilities from automated tooling and tests.
• Develop secure-by-default frameworks and pipelines to make security the easier path for developers.
• Maintain SOPs for DevSecOps, security gates, and incident response playbooks; ensure regulatory alignment.

Skills

Application security

Secure coding practices

OWASP Top 10

Threat modeling (STRIDE)

CI/CD security integration

Cloud security (AWS, Azure)

Security tooling in CI/CD

Bug bounty / red team kind experience

Open-source security contributions

Supply chain security initiatives

Regulatory awareness for APAC insurers

Tools

GitHub Actions

Contrast

Rapid7

Tenable

Wiz

Codacy

CodeQL

Jenkins

Job description

Liberty in Asia Pacific is seeking an Application Security Engineer to embed security into the software development lifecycle across APAC markets. You will partner with engineering teams to shift security left, automate controls, and deliver secure software at speed.

Your work will support compliance with cyber risk requirements issued by regulators in APAC and involve threat modeling, secure code reviews, and secure-by-default pipeline design.