Application Security Engineer

ADECCO PERSONNEL PTE LTD; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

ADECCO PERSONNEL PTE LTD is seeking a security-minded professional to conduct application security reviews and risk assessments. You will analyze SAST, SCA and DAST findings, assess false positives, reachable code paths and business impact to drive remediation.

You will also support waivers, risk acceptance and remediation, and partner with Development/DevOps to resolve findings, while reinforcing CI/CD security controls and cloud security across applications and APIs.

Qualifications

• Demonstrated experience in application security, cybersecurity, vulnerability management or DevSecOps.
• Hands-on SAST/SCA/DAST and vulnerability management experience.
• Knowledge of OWASP Top 10, web/API security and Secure SDLC.
• Understanding of CI/CD, DevSecOps and cloud security.

Responsibilities

• Conduct application security reviews and risk assessments.
• Analyse SAST, SCA and DAST findings, vulnerabilities and exploitability.
• Assess false positives, reachable code paths and business impact.
• Support security waivers, risk acceptance and remediation.
• Partner with Development/DevOps teams to resolve security findings.
• Support DevSecOps, CI/CD security controls and security scanning.
• Support application, API and cloud security assessments.

Skills

Application Security

Cybersecurity

Vulnerability Management

DevSecOps

Job description

Role & Responsibilities :

Responsibilities

• Conduct application security reviews and risk assessments.
• Analyse SAST, SCA and DAST findings, vulnerabilities and exploitability.
• Assess false positives, reachable code paths and business impact.
• Support security waivers, risk acceptance and remediation.
• Partner with Development/DevOps teams to resolve security findings.
• Support DevSecOps, CI/CD security controls and security scanning.
• Support application, API and cloud security assessments.

Requirements

• Demonstrated experience in Application Security, Cybersecurity, Vulnerability Management or DevSecOps.
• Hands-on SAST/SCA/DAST and vulnerability management experience.
• Knowledge of OWASP Top 10, web/API security and Secure SDLC.
• Understanding of CI/CD, DevSecOps and cloud security.