Application Security Engineer

Millennium Technology Services; Singapore; On-site; SGD 80,000 - 110,000; Full time

Job summary

A technology firm in Singapore is seeking an experienced Application Security Engineer. In this role, you will conduct threat modeling, guide developers on secure coding standards, perform security code reviews, and analyze vulnerabilities post-deployment. The ideal candidate has over 6 years of experience in Application Security, strong knowledge of web and mobile security, and basic programming skills in Go or Python. Excellent presentation skills and a proactive approach to security are essential.

Qualifications

• At least 6 years of experience in Application Security.
• Strong knowledge of modern web, mobile, and network security.
• Basic programming skills in Go or Python necessary.
• Experience in malware analysis and penetration testing required.
• Fluent in English with proven presentation skills.

Responsibilities

• Conduct threat modeling to identify system vulnerabilities.
• Guide secure software development practices.
• Perform security code reviews to spot vulnerabilities.
• Analyze vulnerabilities after application deployment.

Skills

Application Security experience

Web and mobile security knowledge

Basic programming skills (Go, Python)

Research and tools knowledge

Presentation skills

Malware analysis

Penetration testing

Fluent English

Job description

About the job Application Security Engineer

• Threat modeling: Think about how attackers can compromise a system and what protections are needed against them
• Secure Software Development Lifecycle: Help developers write secure code that minimizes vulnerabilities by implementing secure coding standards, techniques, and best practices. Define and approve security architecture of the developed solution.
• Security code reviews: Identify security vulnerabilities in source code before an application is deployed to production
• Vulnerability testing and analysis: Discover weaknesses once an application is deployed and advise development teams on remediation.

Qualifications

• At least 6 years of experience in Application Security.
• Strong knowledge of the modern web, mobile, and network security. Experience in penetration testing and understanding of exploitation techniques for web and mobile applications.
• At least basic programming skills with Go, Python or other languages. You don't need to be a skilled developer, but you will need to find a common language with our RnD team, so at least some understanding is necessary.
• Any public researchers, tools, disclosed tickets will be considered a strong advantage. Wrote a blog post about your research or have a CVE? Please, be sure to mention it.
• Deep understanding of modern cybercrime and complex attack techniques.
• Good knowledge and understanding of major attacks and recent security events.
• Proven presentation skills and fluent speaking English.
• Experience in malware analysis (windows executables, exploits, scripts).
• Experience in penetration testing and understanding of exploitation techniques.