Application Security Engineer - Secure SDLC & AI Tools

DBS Bank; Singapore; On-site; SGD 180,000 - 260,000; Full time

Job summary

DBS Bank is seeking an experienced Application Security Engineer to fortify our security team and embed secure development practices across the SDLC. You will drive automation, code analysis, and threat mitigation in a complex financial software environment.

You will collaborate with developers, DevOps, and security colleagues to implement secure design principles, run SAST/DAST/IAST, and advance our automation initiatives using Python and Go, including exploration of Generative AI for security

Qualifications

• Degree in computer science, information technology, or a related field.
• Minimum 5 years of experience in cybersecurity engineering, information security, or software development with a secure SDLC focus.
• Deep knowledge of common application security vulnerabilities (OWASP Top 10) and mitigation strategies.
• Strong experience with secure coding practices across languages and frameworks.
• Experience using application security testing tools (SAST/DAST/IAST) and manual testing techniques.

Responsibilities

• Advise on application security tools and processes (SAST/DAST/IAST/SCA) and secure coding guidelines.
• Integrate security into the SDLC, promoting secure design and testing.
• Perform vulnerability analysis and root cause investigations for findings.
• Develop automation scripts in Python/Go to streamline security processes.
• Pilot Generative AI tools to enhance security testing and code analysis.
• Contribute to secure SDLC framework, standards, and policies.
• Educate developers on secure coding and security best practices.
• Stay current with security trends and industry developments.

Skills

Python

Go

Java/JavaScript

OWASP Top 10

DevSecOps

Generative AI in security

Education

Bachelor's or Master's degree in Computer Science/IT or related field

Tools

SAST

DAST

IAST

SCA

CI/CD tooling

Job description

DBS Bank is seeking an experienced Application Security Engineer to fortify our security team and embed secure development practices across the SDLC. You will drive automation, code analysis, and threat mitigation in a complex financial software environment.

You will collaborate with developers, DevOps, and security colleagues to implement secure design principles, run SAST/DAST/IAST, and advance our automation initiatives using Python and Go, including exploration of Generative AI for security