Application Security Engineer (AWS / Full-Stack)

SCIENTEC CONSULTING PTE. LTD.; Singapore; On-site; SGD 80,000 - 100,000; Full time

Job summary

A technology consultancy in Singapore is seeking an experienced Application Security Engineer. You'll secure and enhance cloud-native applications while collaborating with engineering teams. Responsibilities include implementing security controls, conducting assessments, and developing secure APIs using Python/Django and React.js. The ideal candidate will have strong AWS experience and application security knowledge. This role offers a contract with a competitive salary package.

Benefits

Continuous learning and certification support

Collaborative engineering culture

Opportunity to build secure applications

Qualifications

• Strong experience in Application Security, including OWASP, vulnerability management, and secure SDLC.
• Proficiency in AWS services (IAM, Lambda, API Gateway, S3, CloudFront, DynamoDB, RDS).
• Hands-on development skills in Python/Django for backend and API development.
• Experience with CI/CD pipelines and API authentication/authorization.

Responsibilities

• Implement and maintain application security controls across cloud-native systems on AWS.
• Conduct secure code reviews, threat modelling, and vulnerability assessments.
• Develop secure backend services and high-quality user-centric front-end interfaces.
• Automate security testing and integrate AppSec practices into CI/CD pipelines.

Skills

Application Security

AWS services

Python/Django

React.js

CI/CD pipelines

API authentication/authorization

Tools

GitHub Actions

GitLab CI

Jenkins

Snyk

SonarQube

Burp Suite

Trivy

Prisma Cloud

Job description

We are seeking a hands‑on Application Security Engineer with strong AWS and full‑stack development experience (Python/Django & React) to secure, build, and enhance our cloud‑native applications. You will play a critical role in embedding security throughout the SDLC, conducting security assessments, and collaborating closely with engineering teams to design secure, scalable APIs and modern web applications.

• Job Type: Contract
• Salary Package: Up to 9,500 (basic) + AWS

Key Responsibilities

• Implement and maintain application security controls across cloud‑native systems running on AWS.
• Conduct secure code reviews, threat modelling, and vulnerability assessments for APIs, backend services, and front‑end applications.
• Develop and maintain secure, high‑quality backend services using Python/Django and RESTful APIs.
• Build responsive, user‑centric front‑end interfaces using React.js.
• Automate security testing and integrate AppSec practices into CI/CD pipelines.
• Collaborate with developers to remediate security issues and ensure adherence to best practices.
• Design and implement IAM policies, encryption strategies, and security monitoring on AWS.
• Support incident response, security investigations, and compliance‑related activities.

Requirements

• Strong experience in Application Security, including OWASP, vulnerability management, and secure SDLC.
• Proficiency in AWS services (IAM, Lambda, API Gateway, S3, CloudFront, DynamoDB, RDS, ECS/EKS preferred).
• Hands‑on development skills in:
• Python/Django for backend and API development
• React.js for front‑end development
• Experience with CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins).
• Knowledge of API authentication/authorization (JWT, OAuth2, Cognito).
• Familiarity with DevSecOps tools (Snyk, SonarQube, Burp Suite, Trivy, Prisma Cloud, etc.).
• Strong understanding of cloud and application architecture security.

Nice to Have

• Experience with microservices and serverless architectures.
• Container security knowledge (Docker, Kubernetes).
• Certifications such as AWS Security Specialty, CISSP, GIAC, or OSCP.

Why Join Us?

• Opportunity to build secure applications end‑to‑end.
• Collaborative engineering culture with strong innovation focus.
• Continuous learning and certification support.

By submitting your resume, you consent to the collection, use, and disclosure of your personal information per ScienTec’s Privacy Policy (scientecconsulting.com/privacy-policy).

This authorizes us to:

Contact you about potential opportunities.

Delete personal data as it is not required at this application stage.

All applications will be processed with strict confidence. Only shortlisted candidates will be contacted.