Application Security Engineer (CBD) (Contract)

Monetary Authority of Singapore; Singapore; On-site; SGD 75,000 - 105,000; Full time

Job summary

The Monetary Authority of Singapore is seeking an experienced Application Security Engineer to strengthen our security posture by implementing robust measures throughout the software development lifecycle. You will work with development and operations teams to embed security in applications from design to deployment.

Key responsibilities include conducting security assessments, designing controls, and providing secure coding guidance. This is a 2-Year Contract role based in Singapore.

Qualifications

• 3+ years of experience in application security or software development with a security focus.
• Strong knowledge of OWASP Top 10 vulnerabilities.
• Experience with cloud security frameworks.

Responsibilities

• Conduct security assessments and code reviews to identify vulnerabilities.
• Design and implement security controls and authentication mechanisms.
• Provide guidance on secure coding practices to development teams.

Skills

Secure coding practices

Threat modeling

Vulnerability assessment

Problem-solving

Collaboration skills

Education

Bachelor's degree in Computer Science, Information Security, or related field

Tools

Security testing tools

AWS

Azure

GCP

Job description

What the role is:

We are seeking an experienced Application Security Engineer to be part of the Central Banking Division (CBD) and strengthen our organisation's security posture by implementing robust security measures throughout our software development lifecycle. The ideal candidate will work closely with development teams and operation teams to ensure security is embedded in our applications from design to deployment.

What you will be working on:

• Conduct security assessments, threat modelling, and code reviews to identify vulnerabilities in applications.
• Design and implement security controls, authentication mechanisms, and encryption solutions.
• Develop and maintain secure coding guidelines and security standards.
• Collaborate with development teams to remediate security issues and provide guidance on secure coding practices.
• Conduct security awareness training sessions for development teams.
• Monitor and respond to security incidents related to application vulnerabilities.
• Evaluate and implement security tools and technologies.
• Maintain documentation of security processes and procedures.

What we are looking for:

• Bachelor's degree in Computer Science, Information Security, or related field.
• At least 3 years of experience in application security or software development with security focus.
• Strong knowledge of secure coding practices and OWASP Top 10 vulnerabilities.
• Proficiency in common programming languages (e.g., .Net Core, Java, Python, JavaScript).
• Experience with security testing tools and methodologies.
• Understanding of cryptography, authentication, and authorisation protocols.
• Knowledge of common security frameworks and standards (ISO 27001, NIST, etc.).
• Security certifications (CISSP, CEH, OSCP, or equivalent).
• Experience with cloud security (AWS, Azure, GCP).
• Knowledge of DevSecOps practices and tools.
• Familiarity with containerisation and microservices security.
• Strong analytical and problem-solving abilities.
• Excellent communication and collaboration skills.
• Experience with security incident response.

Contract Details:

This is a 2-Year Contract.