Cloud & Application Security Engineer - Hybrid (AWS)

SCIENTEC CONSULTING PTE. LTD.; Singapore; Hybrid; SGD 74,000 - 123,000; Full time

Job summary

ScienTec Consulting Pte Ltd is seeking an Application & Cloud Security Engineer to lead our security programme through advisory to enforcement. You will partner with development teams to embed security controls in the build, test, and release cycles while maintaining velocity.

The role requires hands-on experience with CI/CD pipelines, SAST/DAST/SCA tools, IaC security, and cloud platforms (AWS/Azure). 2-year renewable contract with potential conversion offers long-term opportunities.

Qualifications

• Bachelor's degree in CS, information security, IT or related field.
• At least 4 years in Application Security, DevSecOps, or secure software engineering.
• Hands-on experience in CI/CD tooling integration (GitHub Actions, GitLab CI, Jenkins).
• Knowledge of Secure SDLC and OWASP Top 10.
• Experience with AWS or Azure and Terraform or CloudFormation.
• Proficiency in Python, Java, Go or JavaScript/Node.js.
• Experience with security tools like Snyk, SonarQube, Checkmarx, Wiz, OWASP ZAP.

Responsibilities

• Collaborate with dev teams to embed security into SDLC and CI/CD pipelines.
• Configure and optimise application security tools (SAST, DAST, SCA).
• Design automated security guardrails to stop high-risk issues.
• Analyze findings, reduce false positives, provide remediation guidance.
• Develop secure-by-default standards for apps, containers, and IaC.
• Drive security awareness and improve secure software maturity.

Skills

DevSecOps

Security tooling

Secure SDLC

Secure coding

Education

Bachelor's Degree in Computer Science, Information Security, Information Technology, or related

Tools

GitHub Actions

GitLab CI

Jenkins

Terraform

CloudFormation

Snyk

SonarQube

Checkmarx

Wiz

OWASP ZAP

Job description

ScienTec Consulting Pte Ltd is seeking an Application & Cloud Security Engineer to lead our security programme through advisory to enforcement. You will partner with development teams to embed security controls in the build, test, and release cycles while maintaining velocity.

The role requires hands-on experience with CI/CD pipelines, SAST/DAST/SCA tools, IaC security, and cloud platforms (AWS/Azure). 2-year renewable contract with potential conversion offers long-term opportunities.