Application Security Consultant

OX CONSULTANCY PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

OX CONSULTANCY PTE. LTD. is seeking a security-forward software professional to join our team in Singapore. You will apply combined software dev and security experience to design, implement and secure cloud-based solutions across API architectures and DevOps pipelines.

You will lead threat modelling activities, enforce OWASP guidelines, and implement automated secure testing in CI/CD, while collaborating with stakeholders and delivering training to uplift security awareness.

Qualifications

• At least 4 years combined work experience in software development, application security and cloud computing (e.g. AWS).
• Familiar with mobile and web API architecture (REST, SOAP, SSL/TLS).
• Experience in threat modelling and identifying/appraising security risks in projects.
• Strong knowledge of OWASP Top 10 and ASVS.
• Familiar with Agile, CI/CD, DevOps and automation in pipelines.
• Experience using SAST tools such as Fortify-on-Demand or SonarQube.
• Experience addressing vulnerabilities with timely remediation and patching.
• Conduct security awareness training sessions.
• Excellent verbal/written communication and stakeholder collaboration.
• Relevant certifications preferred (e.g., CISSP, OSCP, AWS security).
• Experience with Government Commercial Cloud (GCC) is a plus.

Responsibilities

• Conduct security awareness training sessions.
• Track and address security vulnerabilities with timely remediation and patching processes.
• Collaborate with cross‑functional teams to integrate secure coding practices into CI/CD.

Skills

Software development

Application security

Cloud computing

API architecture

Threat modelling

OWASP

CI/CD

DevOps

SAST tools

Vulnerability remediation

Security training

Communication

Independent work

Government GCC knowledge

AWS security

Tools

Gitlab

Github

Ansible

Job description

• At least 4 years combined work experience in software development, application security and cloud computing (e.g. AWS)
• Familiar with mobile and web application programming interfaces (API) architecture (e.g. REST, SOAP, SSL/TLS)
• Experience in threat modelling and able to establish threat profiles for application projects to identify, quantify and remediate application security risks
• Strong knowledge of security best practices such as OWASP Top 10, OWASP application security verification standard
• Familiar with Agile Development process, CI/CD, DevOps concepts, tools (Gitlab, Github,
• Ansible etc) and how automated security testing can be incorporated into CI/CI pipelines
• Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc
• Track and address security vulnerabilities with timely remediation and patching processes.
• Conduct security awareness training sessions
• Good verbal/written communications, collaboration skills and experience interacting with various stakeholders
• Strong analytical, problem-solving and troubleshooting skills, ability to work independently
• Relevant certifications preferred (eg. CISSP, OSCP, AWS security, AWS DevOps Engineer or equivalent etc.)
• Experience in working with Government Commercial Cloud (GCC) preferred.