Application Security & Cloud Risk Officer

CMC-APAC PRIVATE LIMITED; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

CMC-APAC PRIVATE LIMITED is seeking an experienced Application Security Officer to strengthen cybersecurity risk management across on‑prem and cloud environments in Singapore. The role focuses on reviewing architectures, APIs, and data flows to identify security risks and ensure remediations align with best practices.

You will drive threat modelling and secure development throughout projects. The candidate should bring 5+ years in software development, application security, and cloud computing,

Qualifications

• Minimum 5 years in software development, application security and cloud environments.
• Familiarity with REST, SOAP, and SSL/TLS in web/mobile apps.
• Understanding of OWASP Top 10 and ASVS standards.

Responsibilities

• Assess security risks for applications, infra, and cloud services.
• Review architectures, data flows, APIs, and entry points for risks.
• Develop threat models and remediation strategies for projects.
• Monitor vulnerabilities and ensure timely fixes.
• Lead security incident response and post-incident reviews.
• Deliver security awareness training and promote secure practices.

Skills

Application security

Cloud computing

Software development

Threat modelling

DevSecOps

Education

Degree in a relevant discipline

Tools

GitLab

GitHub

Ansible

Fortify on Demand

SonarQube

Job description

CMC-APAC PRIVATE LIMITED is seeking an experienced Application Security Officer to strengthen cybersecurity risk management across on‑prem and cloud environments in Singapore. The role focuses on reviewing architectures, APIs, and data flows to identify security risks and ensure remediations align with best practices.

You will drive threat modelling and secure development throughout projects. The candidate should bring 5+ years in software development, application security, and cloud computing,