Application Security Engineer (DevSecOps)

Envoy Search Partners Pte Limited; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

Envoy Search Partners Pte Limited is seeking an Application Security Engineer (DevSecOps) to embed security throughout the software development lifecycle. You will assist clients in defining, rolling out, and implementing DevSecOps within their processes, teams, and tooling, leveraging automated checks in CI/CD.

The role requires knowledge of application security testing, Agile/DevOps practices, and scripting abilities. Travel to overseas assignments may be needed as projects demand.

Qualifications

• University degree in Computer Science, Computer/Electrical Engineering, Information Technology or equivalent.
• At least one year of relevant working experience in release management or development.
• Knowledge in application security testing.
• Understanding of Agile, Waterfall, DevOps, infrastructure as code.
• Able to program or script.
• Willingness to travel overseas as needed.

Responsibilities

• Define DevSecOps implementation strategies tailored to the client's needs.
• Assist with rolling out and implementing DevSecOps within client processes and tooling.
• Embed security in the development process across CI/CD release cycles.
• Analyze security assessments and propose remediation strategies.
• Review penetration test reports and develop mitigation plans.
• Deliver high-quality client services within time and budget.

Skills

Application security testing

Programming or scripting

Agile/DevOps/IaC understanding

Communication skills

Willingness to travel

Education

Bachelor's degree in CS/Engineering/IT

Tools

AWS

Azure

OpenShift

Fortify (or similar)

Job description

Application Security Engineer (DevSecOps)

Our clients are faced with external pressures on an unprecedented scale. The ability to translate strategy into reality is key to their enhanced business performance. As an advisory professional, you will be focused on helping them achieve this goal.

Your key responsibilities:

As an Application Security Engineer, you will assist our clients with defining, rolling out and implementing DevSecOps within their processes, teams and tooling. This is a role where you will aim to embed security in every part of the development process, leveraging automated tools and workflows within the CI/CD release process.

Skills and attributes for success:

• Define DevSecOps implementation strategies tailored to the client's needs, engaging with the various takeholders
• Evaluate and analyze threat, vulnerability, impact and risk to security issues discovered from security assessments
• Advise clients on the security issues, including explanation on the technical details and how they can remediate the vulnerabilities in their applications
• Assist with implementing and designing automated security checks within the CI/CD
• Analyze penetration testing reports and provide a mitigation strategy to prevent the issue from occurring in the first place (left shifting)
• Consistently deliver quality client services and manage expectations of client service delivery.
• Drive high-quality work products within expected timeframes and on budget.
• Monitor progress, manage risk and ensure key stakeholders are kept informed about progress and expected outcomes.
• Stay abreast of current business and industry trends relevant to the client's business.
• Develop and maintain long-term relationships and networks with clients and internal stakeholders
• Demonstrate deep technical capabilities and professional knowledge.
• Possess in depth business acumen and demonstrate ability to quickly assimilate to new knowledge.
• Review and Assess controls associated with Operational Technologies and IoT (Internet of Things) security
• Remain current on new developments in advisory services capabilities and industry knowledge.

To qualify for the role you must have:

• A recognized university degree in Computer Science, Computer/Electrical Engineering, Information Technology or equivalent
• Have at least one year of relevant working experience in a release management or development job
• Knowledge in application security testing
• Knowledge in understanding of Agile, Waterfall, DevOps, infrastructure as code
• Able to program or script
• Strong interest in the field of information security
• Creative, independent with good problem-solving skills
• Strong analytical, interpersonal, communication and writing skills
• Willingness to travel on overseas assignment as the need arises

Ideally, you'll also have:

• Professional certifications such as CSSLP, SCRUM, Fortify Certification
• Experience with cloud platforms such as AWS, Azure or OpenShift

What we look for:

Highly motivated individuals with excellent problem-solving skills and the ability to prioritize shifting workloads in a rapidly changing industry. An effective communicator, you'll be a confident team player that collaborates with people from various teams while looking to develop your career in a dynamic organization.