Application Security Engineer - Secure SDLC & DevSecOps

Manpower Staffing Services (Singapore) Pte Ltd; Singapore; Presencial; SGD 90.000 - 130.000; Tempo integral

Resumo da vaga

Manpower Staffing Services (Singapore) Pte Ltd in Singapore seeks an Application Security Advisor to guide development teams on security aspects of the Software Development Lifecycle. You will evaluate new technologies to improve security outcomes and contribute to secure SDLC practices.

The role involves advising on SAST/DAST/SCA, secure coding guidelines, and building improvements to security tools and processes. Experience with OWASP Top 10 and ASVS/MASVS is preferred.

Qualificações

• Bachelor's degree in IT or related discipline.
• Proficient in Java and Python.
• Knowledge of Agile, DevOps and DevSecOps practices.
• Hands-on with SAST, DAST, SCA and IAST tooling.
• Understanding of OWASP Top 10 and ASVS/MASVS.
• Penetration testing experience is a plus.
• Experience in code reviews or application security assessments is a plus.

Responsabilidades

• Provide advisory for development teams on application security.
• Contribute to improvements of existing application security tools and processes: SAST, DAST, SCA, and secure coding guidelines.
• Provide advisory on application security tools and processes: SAST, DAST, SCA, and secure coding guidelines.
• Contribute to improvements of Secure SDLC practices, such as Security Requirements, Secure Design and Secure Code Review.

Conhecimentos

Java

Python

Agile

DevOps

DevSecOps

SAST

DAST

SCA

IAST

OWASP Top 10

OWASP ASVS/MASVS

Formação

Bachelor's degree in IT or related discipline

Ferramentas

SAST tooling

DAST tooling

SCA tooling

IAST tooling

Descrição da vaga

Manpower Staffing Services (Singapore) Pte Ltd in Singapore seeks an Application Security Advisor to guide development teams on security aspects of the Software Development Lifecycle. You will evaluate new technologies to improve security outcomes and contribute to secure SDLC practices.

The role involves advising on SAST/DAST/SCA, secure coding guidelines, and building improvements to security tools and processes. Experience with OWASP Top 10 and ASVS/MASVS is preferred.