Application Security Strategist

IBM SINGAPORE PTE LTD; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

IBM SINGAPORE PTE LTD is seeking aSecurity Consultant specializing in Application Security to help clients address risks, vulnerabilities, and incidents. You will provide expert guidance, conduct interviews and assessments, and deliver remediation roadmaps tailored to each client’s security posture.

Your role involves applying DevSecOps concepts, collaborating with client teams, and delivering high-quality consulting services to strengthen overall security posture in complex environments.

Qualifications

• Bachelor’s degree in CS/Cybersecurity or related field.
• 4+ years in application security, security auditing, or secure software development.
• Hands-on experience with security testing tools (e.g., SonarQube, Fortify SAST/DAST, Burp Suite, OWASP ZAP).
• Familiarity with OWASP Top 10, secure coding principles, and CI/CD pipelines.

Responsibilities

• Review and validate results from SAST and DAST tools.
• Audit OS, container, and database scans for vulnerabilities and misconfigurations.
• Assess the effectiveness of hardening measures across application components (web servers, APIs, containers, databases).
• Collaborate with development and DevSecOps teams to ensure remediation of identified issues.
• Maintain audit documentation, including findings and remediation tracking.
• Stay updated on emerging threats, vulnerabilities, and secure development trends.

Skills

Strong communication skills

Collaboration skills

Analytical mindset

Attention to detail

Experience with Agile and DevOps

Interpreting scan results

Education

Bachelor’s degree in computer science, Cybersecurity, or related field

Tools

SonarQube

Fortify SAST/DAST

Burp Suite

OWASP ZAP

Docker

Kubernetes

Job description

IBM SINGAPORE PTE LTD is seeking aSecurity Consultant specializing in Application Security to help clients address risks, vulnerabilities, and incidents. You will provide expert guidance, conduct interviews and assessments, and deliver remediation roadmaps tailored to each client’s security posture.

Your role involves applying DevSecOps concepts, collaborating with client teams, and delivering high-quality consulting services to strengthen overall security posture in complex environments.