Application Security Manager

DHL Express; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

DHL Express is seeking an Application Security Manager to join our Global Head Office in Singapore (preferred) or Cyberjaya, Malaysia. The role strengthens security across the software development lifecycle, embedding security-by-design and driving secure digital solutions.

You will mentor teams in Cloud Security, web app security, DevSecOps, and CI/CD security, and run security assessments and threat modelling to enhance the organisation's cybersecurity posture.

Qualifications

• Hands-on experience in application security assessments and vulnerability management.
• Familiarity with secure SDLC practices and CI/CD security integration.
• Proficiency in communicating risks to diverse stakeholders.
• Professional certifications such as CISSP, CISM, or equivalent preferred.

Responsibilities

• Support Cyber Security Program implementation within DHL Express.
• Mentor teams in Cloud Security, web app security, anti-bot technologies, and secure coding practices.
• Lead application security assessments with internal and external entities.
• Perform SAST/DAST/IAST, SCA, and Penetration Testing to assess security posture.
• Conduct Threat Modelling to identify threats and design mitigations.
• Advise on security counter-measures with IT and business stakeholders.
• Collaborate with Corporate Functions on cyber risk and compliance.
• Represent security in reviews with global, regional, and country teams.

Skills

Cloud Security

Web Application Security

DevSecOps

CI/CD Security

Threat Modelling

Secure Coding Practices

Education

Degree in Computer Science or Cyber Security

Job description

DHL Express - a company that connects people!

At DHL Express, our people are at the heart of everything we do. As the world's leading international express logistics company, we connect people and improve lives through our global network, innovative technology, and commitment to excellence. Recognised as one of the world's best workplaces, we foster an inclusive environment where employees are empowered to grow, innovate, and make a meaningful impact.

If you are passionate about cybersecurity and committed to help protect global business at scale, we'd like to hear from you! We are looking for an Application Security Manager to join as a member of our Global Head Office in Singapore (preferred), or Cyberjaya, Malaysia.

Role Purpose

Reporting to the Domain Director, you will play a key role in strengthening the security of DHL Express applications across the software development lifecycle (SDLC). You will work closely with technology teams, architects, developers, and business stakeholders to embed security-by-design principles, identify security risks, and support the delivery of secure digital solutions.

The role combines technical expertise, advisory capabilities, and stakeholder management to drive application security assessments, security automation, secure development practices, and continuous improvement of DHL's cybersecurity posture. You will also contribute to the development and implementation of application security standards, policies, processes, and tools aligned with industry-recognised frameworks and best practices.

Key Responsibilities

• Support implementation of Cyber Security Program (Cyber Security Expertise Center) in DHL Express.
• Provide technical mentorship to team in key areas such as Cloud Security, web application security, anti-bot technologies, DevSecOps, CI/CD security, and secure coding practices.
• Deliver Application Security Assessment activities with entities within DHL Express and external suppliers/customers.
• Run in-depth assessments on the applications using SAST, DAST, SCA, Penetration Testing, Red Teaming Activities to determine application security posture and potential vulnerabilities.
• Provide guidance to the design and development of solutions under the cyber-security counter-measure plan by conducting Threat Modelling on the applications.
• Ensure appropriate security counter measures and plans are developed by Business IT, IT Services and its IT service suppliers.
• Indirect support of Corporate Functions (Security, Compliance, Data Protection) and external customers/suppliers for cyber security related request.
• Report effectiveness of DHL Express cyber-security readiness to technical asset owner with explicit focus on high risk / high impact threats / vulnerabilities / incidents and actions being taken for mitigation.
• Provide support to the Risk/Compliance/Audit function on DHL Express cyber risk exposures.
• Provide input to the design and development of management practices and solutions selected from the cyber security counter measure plan.
• Develop and deliver Cyber Security best practices/processes/tool.
• Work with global, regional and country stakeholders to support the cyber security reviews.

Do you have what it takes?

• Degree in Computer Science, Information Systems, Cyber Security, or a related discipline.
• Professional certifications such as CISSP, CISM, CISA, CRISC, OSCP, CSSLP or equivalent.
• Preferably 8 years of professional experience in Cyber Security, Information Security, Application Security, or related technical security domains, within large multinational or globally distributed technology environments.
• Hands-on experience performing application security assessments and vulnerability management activities.
• Experience with secure SDLC practices, DevSecOps methodologies, and CI/CD security integration.
• Practical knowledge of application security testing methodologies and frameworks, including OWASP Top 10, OWASP ASVS, OSSTMM, SANS, or similar industry standards.
• Strong understanding of web application security, API security, cloud security concepts, and secure coding principles.
• Ability to communicate technical risks and recommendations effectively to diverse stakeholder groups.
• Proficiency in spoken and written English.

DHL is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other protected characteristic.