AppSec Security Engineer — AI‑Driven Secure SDLC

Shopee; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

Shopee Singapore is looking for a Security Engineer with solid security fundamentals and software development capabilities to contribute to the internal Secure SDLC tools and automation capabilities.

You will work on code security, software supply‑chain security, vulnerability analysis, and AI‑assisted security engineering, collaborating with security and engineering teams to integrate security into real‑world software development workflows.

Qualifications

• Bachelor’s degree in Computer Science, Software Engineering, Cybersecurity, or a related field.
• At least 2 years of relevant experience in security engineering, application security, secure code review, or a related area.
• Good application security fundamentals and understanding of common Web, API, and code‑security risks.
• Familiarity with at least one programming language (Go, Python, Java, or JavaScript).
• Experience using AI‑assisted development tools and security tooling such as CodeQL, Semgrep, SonarQube, or Nuclei.

Responsibilities

• Participate in the design, development, and improvement of internal security tools and platforms (AI‑assisted code review, SAST, SCA, and security automation).
• Develop and improve security detection rules, analysis logic, and automated workflows.
• Conduct secure code reviews, vulnerability analysis, and false‑positive investigation to improve coverage.
• Use AI‑assisted development tools to enhance engineering and security efficiency.
• Collaborate to integrate security tools with Git, CI/CD pipelines, and developer workflows.
• Participate in feature development, testing, troubleshooting, and system maintenance.
• Work with cross‑functional teams to support remediation and continuous improvement of security issues.

Skills

Security fundamentals

Programming languages

AI-assisted development

Git/CI‑CD/containers

Networking/OS fundamentals

Education

Bachelor’s degree in CS/SE/Cybersecurity

Tools

CodeQL

Semgrep

SonarQube

Nuclei

Job description

Shopee Singapore is looking for a Security Engineer with solid security fundamentals and software development capabilities to contribute to the internal Secure SDLC tools and automation capabilities.

You will work on code security, software supply‑chain security, vulnerability analysis, and AI‑assisted security engineering, collaborating with security and engineering teams to integrate security into real‑world software development workflows.