Application & Cloud Security Engineer (DevSecOps)

SCIENTEC CONSULTING PTE. LTD.; Singapore; On-site; SGD 74,000 - 123,000; Full time

Job summary

ScienTec Consulting Pte Ltd is seeking an Application & Cloud Security Engineer to lead our security programme through advisory to enforcement. You will partner with development teams to embed security controls in the build, test, and release cycles while maintaining velocity.

The role requires hands-on experience with CI/CD pipelines, SAST/DAST/SCA tools, IaC security, and cloud platforms (AWS/Azure). 2-year renewable contract with potential conversion offers long-term opportunities.

Qualifications

• Bachelor's degree in CS, information security, IT or related field.
• At least 4 years in Application Security, DevSecOps, or secure software engineering.
• Hands-on experience in CI/CD tooling integration (GitHub Actions, GitLab CI, Jenkins).
• Knowledge of Secure SDLC and OWASP Top 10.
• Experience with AWS or Azure and Terraform or CloudFormation.
• Proficiency in Python, Java, Go or JavaScript/Node.js.
• Experience with security tools like Snyk, SonarQube, Checkmarx, Wiz, OWASP ZAP.

Responsibilities

• Collaborate with dev teams to embed security into SDLC and CI/CD pipelines.
• Configure and optimise application security tools (SAST, DAST, SCA).
• Design automated security guardrails to stop high-risk issues.
• Analyze findings, reduce false positives, provide remediation guidance.
• Develop secure-by-default standards for apps, containers, and IaC.
• Drive security awareness and improve secure software maturity.

Skills

DevSecOps

Security tooling

Secure SDLC

Secure coding

Education

Bachelor's Degree in Computer Science, Information Security, Information Technology, or related

Tools

GitHub Actions

GitLab CI

Jenkins

Terraform

CloudFormation

Snyk

SonarQube

Checkmarx

Wiz

OWASP ZAP

Job description

Working Hours: Monday – Thursday (8.30am – 6pm), Friday (8.30am – 5.30pm) (Hybrid working arrangement)
Working Location: Clarke Quay
Salary Package: Up to SGD 11,000 + AWS
Employment Type: Full-time Contract (2 years renewable with chances of conversion)

We are seeking an Application & Cloud Security Engineer to lead the evolution of our security programme from advisory to enforcement. This role requires a technical leader who can seamlessly integrate security controls into our development lifecycle whilst maintaining engineering velocity. The successful candidate will transform existing security guardrails into automated enforcement mechanisms and serve as a trusted partner to development teams in building secure, resilient applications.

Key Responsibilities:

• Work closely with development teams to integrate security into the SDLC and CI/CD pipelines.
• Implement, configure, and optimise application security tools including SAST, DAST, and Software Composition Analysis (SCA).
• Design and automate security guardrails to prevent high-risk vulnerabilities from progressing through the development pipeline.
• Analyse security findings, reduce false positives, and provide hands‑on remediation guidance and secure coding best practices.
• Develop secure‑by‑default standards for applications, containers, and Infrastructure as Code (IaC).
• Drive security awareness initiatives and improve secure software engineering maturity across development teams.

Requirements:

• Bachelor's Degree in Computer Science, Information Security, Information Technology, or a related discipline.
• At least 4 years of experience in Application Security, DevSecOps, Product Security, or Secure Software Engineering.
• Hands‑on experience integrating security tools into CI/CD pipelines using GitHub Actions, GitLab CI, Jenkins, or similar platforms.
• Strong knowledge of Secure SDLC, application security principles, and common web application vulnerabilities (e.g. OWASP Top 10).
• Experience with cloud platforms such as AWS or Azure, and Infrastructure as Code tools such as Terraform or CloudFormation.
• Proficiency in at least one programming language such as Python, Java, Go, or JavaScript/Node.js.
• Experience with security tools such as Snyk, SonarQube, Checkmarx, Wiz, or OWASP ZAP.

By submitting your resume, you consent to the collection, use, and disclosure of your personal information per ScienTec’s Privacy Policy (scientecconsulting.com/privacy-policy).

This authorizes us to:

• Contact you about potential opportunities.
• Delete personal data as it is not required at this application stage.
• All applications will be processed with strict confidence. Only shortlisted candidates will be contacted.

Wong Siew Ting (Maeve) - R25127375

ScienTec Consulting Pte Ltd - 11C5781