Application Security Manager

Eames Consulting; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Eames Consulting in Singapore seeks an Application Security Manager to bring governance and structured security to the software development lifecycle. This is not a hands-on code review role; you will define checkpoints and partner with developers to lift secure coding hygiene.

You will drive AI security thinking, assess AI-related risks, and influence teams to adopt practical, secure practices while communicating with stakeholders across the business.

Qualifications

• Solid grounding in application security and SDLC governance.
• Working knowledge of AI security considerations and AI threat vectors.
• Comfortable engaging developers directly on security practice with strong emotional intelligence and stakeholder management.

Responsibilities

• Own and enforce SDLC governance checkpoints, ensuring development practices meet security and compliance standards.
• Partner with the software development team to close out common vulnerabilities and improve secure coding habits.
• Advise on security implications of deploying AI tools internally and externally, including chatbots.
• Assess and mitigate risks from AI as a threat vector, including unauthorised or unintended AI agent access to internal systems.
• Act as the security governance point of contact for development teams, translating requirements into practical guidance.
• Report on SDLC compliance status and emerging AI-related risk to stakeholders.

Skills

Application security

SDLC governance

AI security

Stakeholder management

Emotional intelligence

Influencing

Job description

A growing technology organisation is looking for an Application Security Manager to bring structure and governance to how its software development function builds and ships code. This is not a hands‑on code review role. Instead, you'll own the checkpoints that ensure the software development lifecycle (SDLC) is compliant with the organisation's security and governance requirements, while working closely with developers to lift baseline secure coding hygiene.

You'll also bring the organisation's application security thinking into the AI era: helping the business understand how to secure AI‑powered tools such as chatbots, and how to guard against AI itself being used as an attack vector, for example an autonomous agent scanning internal infrastructure.

This is as much an influencing role as a technical one. You'll be working with a development team that has grown fast and picked up some risky habits along the way (hardcoded credentials among them), so the ability to bring people with you, rather than police them, matters as much as your technical grounding.

Key responsibilities

• Own and enforce SDLC governance checkpoints, ensuring development practices meet the organisation's security and compliance standards
• Partner with the software development team to close out common vulnerabilities and poor practices (such as hardcoded credentials), improving secure coding habits over time
• Advise on the security implications of deploying AI tools internally and externally, including customer- or employee-facing chatbots
• Assess and mitigate risks from AI as a threat vector, including unauthorised or unintended AI agent access to internal systems
• Act as the security governance point of contact for development teams, translating requirements into practical, adoptable guidance
• Report on SDLC compliance status and emerging AI-related risk to relevant stakeholders

About you

• Solid grounding in application security and SDLC governance; you do not need to read or review code line by line
• Working knowledge of AI security considerations: securing AI applications such as chatbots, and understanding AI‑related threat vectors
• Comfortable engaging developers directly on security practice without creating friction, strong emotional intelligence and stakeholder management skills are essential
• Open to candidates at assistant manager level and above; this is not a role that requires deep seniority, more the right blend of technical grounding and influencing skill